Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.8
CVSSv2

CVE-2021-20601

Published: 23/11/2021 Updated: 29/11/2021
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:C/A:N
Subscribe to Mitsubishielectric

Vulnerability Summary

Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated malicious user to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mitsubishielectric gt softgot2000 -

mitsubishielectric got_simple_gs2110-wtbd_firmware -

mitsubishielectric got_simple_gs2107-wtbd_firmware -

mitsubishielectric got2000_gt2104-rtbd_firmware -

mitsubishielectric got2000_gt2103-pmbd_firmware -

mitsubishielectric got2000_gt2103-pmbds_firmware -

mitsubishielectric got2000_gt2103-pmbds2_firmware -

mitsubishielectric got2000_gt2103-pmbls_firmware -

mitsubishielectric got2000_gt2107-wtbd_firmware -

mitsubishielectric got2000_gt2310-vtba_firmware -

mitsubishielectric got2000_gt2310-vtbd_firmware -

mitsubishielectric got2000_gt2308-vtbd_firmware -

mitsubishielectric got2000_gt2308-vtba_firmware -

mitsubishielectric got2000_gt2507t-wtsd_firmware -

mitsubishielectric got2000_gt2507-wtsd_firmware -

mitsubishielectric got2000_gt2507-wtbd_firmware -

mitsubishielectric got2000_gt2512-wxtsd_firmware -

mitsubishielectric got2000_gt2510-wxtbd_firmware -

mitsubishielectric got2000_gt2510-wxtsd_firmware -

mitsubishielectric got2000_gt2512-wxtbd_firmware -

mitsubishielectric got2000_gt2505hs-vtbd_firmware -

mitsubishielectric got2000_gt2506hs-vtbd_firmware -

mitsubishielectric got2000_gt2512-stba_firmware -

mitsubishielectric got2000_gt2512-stbd_firmware -

mitsubishielectric got2000_gt2510-vtba_firmware -

mitsubishielectric got2000_gt2510-vtbd_firmware -

mitsubishielectric got2000_gt2510-vtwa_firmware -

mitsubishielectric got2000_gt2510-vtwd_firmware -

mitsubishielectric got2000_gt2508-vtba_firmware -

mitsubishielectric got2000_gt2508-vtbd_firmware -

mitsubishielectric got2000_gt2508-vtwa_firmware -

mitsubishielectric got2000_gt2508-vtwd_firmware -

mitsubishielectric got2000_gt2505-vtbd_firmware -

mitsubishielectric got2000_gt2705-vtbd_firmware -

mitsubishielectric got2000_gt2708-vtbd_firmware -

mitsubishielectric got2000_gt2708-vtba_firmware -

mitsubishielectric got2000_gt2708-stba_firmware -

mitsubishielectric got2000_gt2708-stbd_firmware -

mitsubishielectric got2000_gt2710-stba_firmware -

mitsubishielectric got2000_gt2710-stbd_firmware -

mitsubishielectric got2000_gt2710-vtba_firmware -

mitsubishielectric got2000_gt2710-vtbd_firmware -

mitsubishielectric got2000_gt2710-vtwa_firmware -

mitsubishielectric got2000_gt2710-vtwd_firmware -

mitsubishielectric got2000_gt2712-stwd_firmware -

mitsubishielectric got2000_gt2712-stwa_firmware -

mitsubishielectric got2000_gt2712-stba_firmware -

mitsubishielectric got2000_gt2712-stbd_firmware -

mitsubishielectric got2000_gt2715-xtbd_firmware -

mitsubishielectric got2000_gt2715-xtba_firmware -

References

CWE-20https://jvn.jp/vu/JVNVU98072504https://us-cert.cisa.gov/ics/advisories/icsa-21-320-02https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2021-018.pdfhttps://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7028memory leaklog injectionCVE-2024-3400CVE-2022-48695CVE-2022-48675CVE-2024-34487CVE-2024-33792spoof
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook