CVE-2022-40266
Medium
Description
Improper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 01.39.000 and prior, Mitsubishi Electric GOT2000 Series GT25 model FTP server versions 01.39.000 and prior and Mitsubishi Electric GOT2000 Series GT23 model FTP server versions 01.39.000 and prior allows a remote authenticated attacker to cause a Denial of Service condition by sending specially crafted command.
SeverityMedium
CVSS5.3
Exploit probability—
ProductMitsubishielectric Got2000 Gt27 Firmware
PublishedNov 24, 2022
First seenNov 24, 2022
Weakness typeCWE-20Improper input validation
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitsubishielectric got2000_gt27_firmware | v ≤ 01.39.000 | — |
| mitsubishielectric got2000_gt25_firmware | v ≤ 01.39.000 | — |
| mitsubishielectric got2000_gt23_firmware | v ≤ 01.39.000 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.