Improper input validation in Mitsubishielectric Got2000 Gt2103-Pmbd
CVE-2021-20601
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.023 (82.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Mitsubishielectric Got2000_gt2103-pmbd
- Mitsubishielectric Got2000_gt2103-pmbd_firmware
- Mitsubishielectric Got2000_gt2103-pmbds
- Mitsubishielectric Got2000_gt2103-pmbds2
- Mitsubishielectric Got2000_gt2103-pmbds2_firmware
- Mitsubishielectric Got2000_gt2103-pmbds_firmware
- Mitsubishielectric Got2000_gt2103-pmbls
- Mitsubishielectric Got2000_gt2103-pmbls_firmware
- Mitsubishielectric Got2000_gt2104-rtbd
- Mitsubishielectric Got2000_gt2104-rtbd_firmware
Weakness classification (CWE)
References
- Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp (x_refsource_MISC, Vendor Advisory)
- Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp (Third Party Advisory, x_refsource_MISC)
- Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2021-20601?
- CVE-2021-20601 is a high-severity vulnerability in Mitsubishielectric Got2000 Gt2103-Pmbd, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2021-11-23.
- How severe is CVE-2021-20601?
- High severity. CVSS v3 base score is 7.5 out of 10.