CVEvulnerability
CVE-2021-20601
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-11-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:C/A:N
- Weaknesses
- CWE-20
Description
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.
Affected configurations
• mitsubishielectric gt softgot2000
• mitsubishielectric got simple gs2110-wtbd firmware
• mitsubishielectric got simple gs2107-wtbd firmware
• mitsubishielectric got2000 gt2104-rtbd firmware
• mitsubishielectric got2000 gt2103-pmbd firmware
• mitsubishielectric got2000 gt2103-pmbds firmware
• mitsubishielectric got2000 gt2103-pmbds2 firmware
• mitsubishielectric got2000 gt2103-pmbls firmware
• mitsubishielectric got2000 gt2107-wtbd firmware
• mitsubishielectric got2000 gt2310-vtba firmware
• mitsubishielectric got2000 gt2310-vtbd firmware
• mitsubishielectric got2000 gt2308-vtbd firmware
• mitsubishielectric got2000 gt2308-vtba firmware
• mitsubishielectric got2000 gt2507t-wtsd firmware
• mitsubishielectric got2000 gt2507-wtsd firmware
• mitsubishielectric got2000 gt2507-wtbd firmware
• mitsubishielectric got2000 gt2512-wxtsd firmware
• mitsubishielectric got2000 gt2510-wxtbd firmware
• mitsubishielectric got2000 gt2510-wxtsd firmware
• mitsubishielectric got2000 gt2512-wxtbd firmware
• mitsubishielectric got2000 gt2505hs-vtbd firmware
• mitsubishielectric got2000 gt2506hs-vtbd firmware
• mitsubishielectric got2000 gt2512-stba firmware
• mitsubishielectric got2000 gt2512-stbd firmware
• mitsubishielectric got2000 gt2510-vtba firmware
• mitsubishielectric got2000 gt2510-vtbd firmware
• mitsubishielectric got2000 gt2510-vtwa firmware
• mitsubishielectric got2000 gt2510-vtwd firmware
• mitsubishielectric got2000 gt2508-vtba firmware
• mitsubishielectric got2000 gt2508-vtbd firmware
• mitsubishielectric got2000 gt2508-vtwa firmware
• mitsubishielectric got2000 gt2508-vtwd firmware
• mitsubishielectric got2000 gt2505-vtbd firmware
• mitsubishielectric got2000 gt2705-vtbd firmware
• mitsubishielectric got2000 gt2708-vtbd firmware
• mitsubishielectric got2000 gt2708-vtba firmware
• mitsubishielectric got2000 gt2708-stba firmware
• mitsubishielectric got2000 gt2708-stbd firmware
• mitsubishielectric got2000 gt2710-stba firmware
• mitsubishielectric got2000 gt2710-stbd firmware
• mitsubishielectric got2000 gt2710-vtba firmware
• mitsubishielectric got2000 gt2710-vtbd firmware
• mitsubishielectric got2000 gt2710-vtwa firmware
• mitsubishielectric got2000 gt2710-vtwd firmware
• mitsubishielectric got2000 gt2712-stwd firmware
• mitsubishielectric got2000 gt2712-stwa firmware
• mitsubishielectric got2000 gt2712-stba firmware
• mitsubishielectric got2000 gt2712-stbd firmware
• mitsubishielectric got2000 gt2715-xtbd firmware
• mitsubishielectric got2000 gt2715-xtba firmware
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://jvn.jp/vu/JVNVU98072504 Third Party Advisory
- https://us-cert.cisa.gov/ics/advisories/icsa-21-320-02 Third Party Advisory, US Government Resource
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2021-018.pdf Vendor Advisory
- https://jvn.jp/vu/JVNVU98072504 Third Party Advisory
- https://us-cert.cisa.gov/ics/advisories/icsa-21-320-02 Third Party Advisory, US Government Resource
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2021-018.pdf Vendor Advisory