CVE-2021-20601

Published: Nov 23, 2021Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.

Affected (50)

Mitsubishielectric

50 products

Gt Softgot2000

Got Simple Gs2110 Wtbd Firmware

Got Simple Gs2107 Wtbd Firmware

Got2000 Gt2104 Rtbd Firmware

Got2000 Gt2103 Pmbd Firmware

Got2000 Gt2103 Pmbds Firmware

Got2000 Gt2103 Pmbds2 Firmware

Got2000 Gt2103 Pmbls Firmware

Got2000 Gt2107 Wtbd Firmware

Got2000 Gt2310 Vtba Firmware

Got2000 Gt2310 Vtbd Firmware

Got2000 Gt2308 Vtbd Firmware

Got2000 Gt2308 Vtba Firmware

Got2000 Gt2507t Wtsd Firmware

Got2000 Gt2507 Wtsd Firmware

Got2000 Gt2507 Wtbd Firmware

Got2000 Gt2512 Wxtsd Firmware

Got2000 Gt2510 Wxtbd Firmware

Got2000 Gt2510 Wxtsd Firmware

Got2000 Gt2512 Wxtbd Firmware

Got2000 Gt2505hs Vtbd Firmware

Got2000 Gt2506hs Vtbd Firmware

Got2000 Gt2512 Stba Firmware

Got2000 Gt2512 Stbd Firmware

Got2000 Gt2510 Vtba Firmware

Got2000 Gt2510 Vtbd Firmware

Got2000 Gt2510 Vtwa Firmware

Got2000 Gt2510 Vtwd Firmware

Got2000 Gt2508 Vtba Firmware

Got2000 Gt2508 Vtbd Firmware

Got2000 Gt2508 Vtwa Firmware

Got2000 Gt2508 Vtwd Firmware

Got2000 Gt2505 Vtbd Firmware

Got2000 Gt2705 Vtbd Firmware

Got2000 Gt2708 Vtbd Firmware

Got2000 Gt2708 Vtba Firmware

Got2000 Gt2708 Stba Firmware

Got2000 Gt2708 Stbd Firmware

Got2000 Gt2710 Stba Firmware

Got2000 Gt2710 Stbd Firmware

Got2000 Gt2710 Vtba Firmware

Got2000 Gt2710 Vtbd Firmware

Got2000 Gt2710 Vtwa Firmware

Got2000 Gt2710 Vtwd Firmware

Got2000 Gt2712 Stwd Firmware

Got2000 Gt2712 Stwa Firmware

Got2000 Gt2712 Stba Firmware

Got2000 Gt2712 Stbd Firmware

Got2000 Gt2715 Xtbd Firmware

Got2000 Gt2715 Xtba Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mitsubishielectric Gt Softgot2000	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got Simple Gs2110 Wtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got Simple Gs2110 Wtbd	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got Simple Gs2107 Wtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got Simple Gs2107 Wtbd	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2104 Rtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2104 Rtbd	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2103 Pmbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2103 Pmbd	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2103 Pmbds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2103 Pmbds	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2103 Pmbds2 Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2103 Pmbds2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2103 Pmbls Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2103 Pmbls	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2107 Wtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2107 Wtbd	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2310 Vtba Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2310 Vtba	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2310 Vtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2310 Vtbd	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2308 Vtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2308 Vtbd	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2308 Vtba Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2308 Vtba	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2507t Wtsd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2507t Wtsd	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2507 Wtsd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2507 Wtsd	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2507 Wtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2507 Wtbd	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2512 Wxtsd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2512 Wxtsd	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2510 Wxtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2510 Wxtbd	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2510 Wxtsd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2510 Wxtsd	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2512 Wxtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2512 Wxtbd	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2505hs Vtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2505hs Vtbd	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2506hs Vtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2506hs Vtbd	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2512 Stba Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2512 Stba	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2512 Stbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2512 Stbd	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2510 Vtba Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2510 Vtba	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2510 Vtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2510 Vtbd	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2510 Vtwa Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2510 Vtwa	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2510 Vtwd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2510 Vtwd	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2508 Vtba Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2508 Vtba	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2508 Vtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2508 Vtbd	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2508 Vtwa Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2508 Vtwa	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2508 Vtwd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2508 Vtwd	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2505 Vtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2505 Vtbd	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2705 Vtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2705 Vtbd	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2708 Vtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2708 Vtbd	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2708 Vtba Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2708 Vtba	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2708 Stba Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2708 Stba	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2708 Stbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2708 Stbd	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2710 Stba Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2710 Stba	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2710 Stbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2710 Stbd	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2710 Vtba Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2710 Vtba	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2710 Vtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2710 Vtbd	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2710 Vtwa Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2710 Vtwa	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2710 Vtwd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2710 Vtwd	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2712 Stwd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2712 Stwd	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2712 Stwa Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2712 Stwa	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2712 Stba Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2712 Stba	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2712 Stbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2712 Stbd	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2715 Xtbd Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2715 Xtbd	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Got2000 Gt2715 Xtba Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Got2000 Gt2715 Xtba	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

https://jvn.jp/vu/JVNVU98072504

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Third Party Advisory

https://us-cert.cisa.gov/ics/advisories/icsa-21-320-02

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Third Party AdvisoryUS Government Resource

https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2021-018.pdf

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Vendor Advisory

https://jvn.jp/vu/JVNVU98072504

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://us-cert.cisa.gov/ics/advisories/icsa-21-320-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2021-018.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.