CVE-2021-20601
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.28%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- EPSS
- 2.28% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- mitsubishielectric/gt softgot2000 · mitsubishielectric/got simple gs2110-wtbd firmware · mitsubishielectric/got simple gs2107-wtbd firmware · mitsubishielectric/got2000 gt2104-rtbd firmware · mitsubishielectric/got2000 gt2103-pmbd firmware · mitsubishielectric/got2000 gt2103-pmbds firmware · mitsubishielectric/got2000 gt2103-pmbds2 firmware · mitsubishielectric/got2000 gt2103-pmbls firmware · mitsubishielectric/got2000 gt2107-wtbd firmware · mitsubishielectric/got2000 gt2310-vtba firmware · mitsubishielectric/got2000 gt2310-vtbd firmware · mitsubishielectric/got2000 gt2308-vtbd firmware · mitsubishielectric/got2000 gt2308-vtba firmware · mitsubishielectric/got2000 gt2507t-wtsd firmware · mitsubishielectric/got2000 gt2507-wtsd firmware · mitsubishielectric/got2000 gt2507-wtbd firmware · mitsubishielectric/got2000 gt2512-wxtsd firmware · mitsubishielectric/got2000 gt2510-wxtbd firmware · mitsubishielectric/got2000 gt2510-wxtsd firmware · mitsubishielectric/got2000 gt2512-wxtbd firmware · +30 more
- Source
- Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp
References
- https://jvn.jp/vu/JVNVU98072504Third Party Advisory
- https://us-cert.cisa.gov/ics/advisories/icsa-21-320-02Third Party Advisory, US Government Resource
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2021-018.pdfVendor Advisory
- https://jvn.jp/vu/JVNVU98072504Third Party Advisory
- https://us-cert.cisa.gov/ics/advisories/icsa-21-320-02Third Party Advisory, US Government Resource
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2021-018.pdfVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.