CVE-2021-20592

Published: Aug 5, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model communication driver versions 01.19.000 through 01.39.010 and GT23 model communication driver versions 01.19.000 through 01.39.010 and GT SoftGOT2000 versions 1.170C through 1.256S allows a remote unauthenticated attacker to cause DoS condition on the MODBUS/TCP slave communication function of the products by rapidly and repeatedly connecting and disconnecting to and from the MODBUS/TCP communication port on a target. Restart or reset is required to recover.

Affected (4)

Products: Mitsubishielectric: Gt Softgot2000, Got2000 Gt27 Firmware, Got2000 Gt25 Firmware, Got2000 Gt23 Firmware

Mitsubishielectric

4 products

Gt Softgot2000

Got2000 Gt27 Firmware

Got2000 Gt25 Firmware

Got2000 Gt23 Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mitsubishielectric Gt Softgot2000	From 1.170c to 1.256s

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt27 Firmware	From 01.19.000 to 01.39.010

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt27	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt25 Firmware	From 01.19.000 to 01.39.010

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt25	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt23 Firmware	From 01.19.000 to 01.39.010

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt23	All versions

Related CWEs

CWE-662

Improper Synchronization

The product utilizes multiple threads or processes to allow temporary access to a shared resource that can only be exclusive to one process at a time, but it does not properly synchronize these actions, which might cause simultaneous accesses of this resource by multiple threads or processes.

References (4)

https://jvn.jp/vu/JVNVU92414172/index.html

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-007_en.pdf

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

https://jvn.jp/vu/JVNVU92414172/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-007_en.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.