CRITICAL🇵🇱 Wersja polska

CVE-2020-5595

CVSS 9.8v3.1pub. 2020-07-07upd. 2024-11-21

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains a buffer overflow vulnerability, which may allow a remote attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Mitsubishielectric Coreos

    OS
    Mitsubishielectric
    ≤ y

  • Mitsubishielectric Got2000 Gt23

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Got2000 Gt25

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Got2000 Gt27

    HW
    Mitsubishielectric
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2020-5644CRITICAL9.8PL ✓same product

Buffer overflow w firmware paneli HMI Mitsubishi Electric GOT 1000 GT14

CVE-2020-5648CRITICAL9.8PL ✓same product

Argument Injection w firmware GOT 1000 GT14 – zatrzymanie funkcji sieciowych

CVE-2020-5647CRITICAL9.8PL ✓same product

Podatność Auth Bypass w firmware GOT 1000 GT14 — zdalny RCE bez uwierzytelnienia

CVE-2020-5599CRITICAL9.8PL ✓same product

Argument Injection w firmware GOT2000 Mitsubishi Electric — RCE przez sieć

CVE-2021-20592HIGH7.5same product

Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 thr...