Auth bypass in Mitsubishielectric Got2000 Gt25
CVE-2021-20590
Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server versions 01.39.010 and prior, GOT2000 series GT21 model GT2107-WTBD VNC server versions 01.40.000 and prior, GOT2000 series GT21 model GT2107-WTSD VNC server versions 01.40.000 and prior, GOT SIMPLE series GS21 model GS2110-WTBD-N VNC server versions 01.40.000 and prior and GOT SIMPLE series GS21 model GS2107-WTBD-N VNC server versions 01.40.000 and prior allows a remote unauthenticated attacker to gain unauthorized access via specially crafted packets when the "VNC server" function is used.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
EPSS exploit prediction
EPSS: 0.013 (69.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 70th percentile — 69.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: 0.000
Affected products
- Mitsubishielectric Got2000 Gt25
- Mitsubishielectric Got2000 Gt25 Firmware
- Mitsubishielectric Got2000 Gt27
- Mitsubishielectric Got2000 Gt27 Firmware
- Mitsubishielectric Gs2107-Wtbd-N
- Mitsubishielectric Gs2107-Wtbd-N Firmware
- Mitsubishielectric Gs2110-Wtbd-N
- Mitsubishielectric Gs2110-Wtbd-N Firmware
- Mitsubishielectric Gt2107-Wtbd
- Mitsubishielectric Gt2107-Wtbd Firmware
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2021-20590?
- CVE-2021-20590 is a high-severity vulnerability in Mitsubishielectric Got2000 Gt25, classified under Improper Authentication. CVSS score: 7.5/10. Published 2021-04-22.
- How severe is CVE-2021-20590?
- High severity. CVSS v3 base score is 7.5 out of 10.