CVE-2021-20601

Katalog CVE

CVSS 7.5 · High EPSS 2,4%

Kerentanan Improper Input Validation pada mitsubishielectric gt softgot2000, mitsubishielectric got simple gs2110-wtbd firmware +48 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.

Rincian

Terbit di NVD

23 November 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation

EPSS (30 hari)

2,4% peluang dieksploitasi; lebih tinggi dari 83,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2021-018.pdf advisory vendor
• https://us-cert.cisa.gov/ics/advisories/icsa-21-320-02 advisory pihak ketiga · pemerintah AS
• https://jvn.jp/vu/JVNVU98072504 advisory pihak ketiga