CVE-2021-20601
Summary
| CVE | CVE-2021-20601 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-11-23 15:15:00 UTC |
| Updated | 2021-11-29 16:20:00 UTC |
| Description | Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2021-018.pdf | MISC | www.mitsubishielectric.co.jp | |
| Mitsubishi Electric GOT products | CISA | MISC | us-cert.cisa.gov | |
| JVNVU#98072504: 三菱電機製GOT2000シリーズ、GOT SIMPLEシリーズ、GT SoftGOT2000における不適切な入力確認の脆弱性 | MISC | jvn.jp | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 590894 Mitsubishi Electric GOT products Vulnerability (ICSA-21-320-02) (2021-018)