CVE-2021-20601

High

Description

Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.

SeverityHigh
CVSS7.5
Exploit probability—
ProductMitsubishielectric Got2000 Gt2104-rtbd Firmware
PublishedNov 23, 2021
First seenNov 23, 2021

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
mitsubishielectric got2000_gt2104-rtbd_firmwareNo range specified—
mitsubishielectric gt_softgot2000No range specified—
mitsubishielectric got_simple_gs2110-wtbd_firmwareNo range specified—
mitsubishielectric got_simple_gs2107-wtbd_firmwareNo range specified—
mitsubishielectric got2000_gt2103-pmbd_firmwareNo range specified—
mitsubishielectric got2000_gt2103-pmbds_firmwareNo range specified—
mitsubishielectric got2000_gt2103-pmbds2_firmwareNo range specified—
mitsubishielectric got2000_gt2103-pmbls_firmwareNo range specified—
mitsubishielectric got2000_gt2107-wtbd_firmwareNo range specified—
mitsubishielectric got2000_gt2310-vtba_firmwareNo range specified—
mitsubishielectric got2000_gt2310-vtbd_firmwareNo range specified—
mitsubishielectric got2000_gt2308-vtbd_firmwareNo range specified—
mitsubishielectric got2000_gt2308-vtba_firmwareNo range specified—
mitsubishielectric got2000_gt2507t-wtsd_firmwareNo range specified—
mitsubishielectric got2000_gt2507-wtsd_firmwareNo range specified—
mitsubishielectric got2000_gt2507-wtbd_firmwareNo range specified—
mitsubishielectric got2000_gt2512-wxtsd_firmwareNo range specified—
mitsubishielectric got2000_gt2510-wxtbd_firmwareNo range specified—
mitsubishielectric got2000_gt2510-wxtsd_firmwareNo range specified—
mitsubishielectric got2000_gt2512-wxtbd_firmwareNo range specified—
mitsubishielectric got2000_gt2505hs-vtbd_firmwareNo range specified—
mitsubishielectric got2000_gt2506hs-vtbd_firmwareNo range specified—
mitsubishielectric got2000_gt2512-stba_firmwareNo range specified—
mitsubishielectric got2000_gt2512-stbd_firmwareNo range specified—
mitsubishielectric got2000_gt2510-vtba_firmwareNo range specified—
mitsubishielectric got2000_gt2510-vtbd_firmwareNo range specified—
mitsubishielectric got2000_gt2510-vtwa_firmwareNo range specified—
mitsubishielectric got2000_gt2510-vtwd_firmwareNo range specified—
mitsubishielectric got2000_gt2508-vtba_firmwareNo range specified—
mitsubishielectric got2000_gt2508-vtbd_firmwareNo range specified—
mitsubishielectric got2000_gt2508-vtwa_firmwareNo range specified—
mitsubishielectric got2000_gt2508-vtwd_firmwareNo range specified—
mitsubishielectric got2000_gt2505-vtbd_firmwareNo range specified—
mitsubishielectric got2000_gt2705-vtbd_firmwareNo range specified—
mitsubishielectric got2000_gt2708-vtbd_firmwareNo range specified—
mitsubishielectric got2000_gt2708-vtba_firmwareNo range specified—
mitsubishielectric got2000_gt2708-stba_firmwareNo range specified—
mitsubishielectric got2000_gt2708-stbd_firmwareNo range specified—
mitsubishielectric got2000_gt2710-stba_firmwareNo range specified—
mitsubishielectric got2000_gt2710-stbd_firmwareNo range specified—
mitsubishielectric got2000_gt2710-vtba_firmwareNo range specified—
mitsubishielectric got2000_gt2710-vtbd_firmwareNo range specified—
mitsubishielectric got2000_gt2710-vtwa_firmwareNo range specified—
mitsubishielectric got2000_gt2710-vtwd_firmwareNo range specified—
mitsubishielectric got2000_gt2712-stwd_firmwareNo range specified—
mitsubishielectric got2000_gt2712-stwa_firmwareNo range specified—
mitsubishielectric got2000_gt2712-stba_firmwareNo range specified—
mitsubishielectric got2000_gt2712-stbd_firmwareNo range specified—
mitsubishielectric got2000_gt2715-xtbd_firmwareNo range specified—
mitsubishielectric got2000_gt2715-xtba_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.