Vulnerability in Mitsubishielectric Gs21
CVE-2023-3373
Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT21 model versions 01.49.000 and prior and GOT SIMPLE Series GS21 model versions 01.49.000 and prior allows a remote unauthenticated attacker to hijack data connections (session hijacking) or prevent legitimate users from establishing data connections (to cause DoS condition) by guessing the listening port of the data connection on FTP server and connecting to it.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L.
EPSS exploit prediction
EPSS: 0.010 (62.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 63rd percentile — 62.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.010 · newest: 0.010 · change: 0.000
Affected products
- Mitsubishielectric Gs21
- Mitsubishielectric Gs21 Firmware
- Mitsubishielectric Gt21
- Mitsubishielectric Gt21 Firmware
- Mitsubishi Electric Corporation Got2000 Series Gt21 Model — versions 01.49.000 and prior
- Mitsubishi Electric Corporation Got Simple Series Gs21 Model — versions 01.49.000 and prior
Weakness classification (CWE)
References
- www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-006_en.pdf (Vendor Advisory)
- jvn.jp/vu/JVNVU92167394/index.html (Third Party Advisory)
- www.cisa.gov/news-events/ics-advisories/icsa-23-215-01 (US Government Resource, Third Party Advisory)
Frequently asked questions
- What is CVE-2023-3373?
- CVE-2023-3373 is a medium-severity vulnerability in Mitsubishielectric Gs21, classified under CWE-342. CVSS score: 5.9/10. Published 2023-08-04.
- How severe is CVE-2023-3373?
- Medium severity. CVSS v3 base score is 5.9 out of 10.