Lucene search

[email protected]CVE-2020-5644

HistoryNov 06, 2020 - 3:15 a.m.

CVE-2020-5644

2020-11-0603:15:17

CWE-120

[email protected]

web.nvd.nist.gov

cve-2020-5644

buffer overflow

tcp/ip

gt14 model

got 1000 series

vulnerability

firmware

remote attacker

unauthenticated

network functions

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.5%

JSON

Buffer overflow vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version “05.65.00.BD” and earlier, GT1450-QMBDE CoreOS version “05.65.00.BD” and earlier, GT1450-QLBDE CoreOS version “05.65.00.BD” and earlier, GT1455HS-QTBDE CoreOS version “05.65.00.BD” and earlier, and GT1450HS-QMBDE CoreOS version “05.65.00.BD” and earlier) allows a remote unauthenticated attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet.

Affected configurations

NVD

Node

mitsubishielectriccoreosRange≤05.65.00.bd

AND

mitsubishielectricgt1450-qlbdeMatch-

mitsubishielectricgt1450-qmbdeMatch-

mitsubishielectricgt1450hs-qmbdeMatch-

mitsubishielectricgt1455-qtbdeMatch-

mitsubishielectricgt1455hs-qtbdeMatch-

CPENameOperatorVersion
mitsubishielectric:coreosmitsubishielectric coreosle05.65.00.bd

CPE	Name	Operator	Version
mitsubishielectric:coreos	mitsubishielectric coreos	le	05.65.00.bd

CNA Affected

[
  {
    "product": "GT14 Model of GOT 1000 series",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "(GT1455-QTBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QMBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QLBDE CoreOS version ’05.65.00.BD’ and earlier, GT1455HS-QTBDE CoreOS version ’05.65.00.BD’ and earlier, and GT1450HS-QMBDE CoreOS version ’05.65.00.BD’ and earlier)"
      }
    ]
  }
]

References

jvn.jp/vu/JVNVU99562395/index.html

us-cert.cisa.gov/ics/advisories/icsa-20-310-02

www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-014.pdf

www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.5%

JSON

Related for CVE-2020-5644

cvelist1 nessus1 prion1 nvd1 ics1