CVE-2020-5675

🗓️ 04 Dec 2020 07:10:19Reported by jpcertType

Out-of-bounds read vulnerability in GT21 model of GOT2000 series and GS21 model of GOT series allows remote attackers to cause a denial-of-service condition

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2020-5675	4 Dec 202012:26	–	circl
CNNVD	Mitsubishi Electric Multiple Product Buffer Error Vulnerability	4 Dec 202000:00	–	cnnvd
Cvelist	CVE-2020-5675	4 Dec 202007:10	–	cvelist
EUVD	EUVD-2020-26836	7 Oct 202500:30	–	euvd
ICS	Mitsubishi Electric GOT and Tension Controller (Update B)	8 Dec 202000:00	–	ics
NVD	CVE-2020-5675	4 Dec 202008:15	–	nvd
OSV	CVE-2020-5675	4 Dec 202008:15	–	osv
Prion	Design/Logic Flaw	4 Dec 202008:15	–	prion
RedhatCVE	CVE-2020-5675	22 May 202517:42	–	redhatcve
Tenable Nessus	Mitsubishi Electric GOT and Tension Controller (CVE-2020-5675)	7 Feb 202200:00	–	nessus

NVD

Node

mitsubishielectric gt2107-wtbd_firmwareRange≤01.39.000

AND

mitsubishielectric gt2107-wtbdMatch-

Node

mitsubishielectric gt2107-wtsd_firmwareRange≤01.39.000

AND

mitsubishielectric gt2107-wtsdMatch-

Node

mitsubishielectric gt2104-rtbd_firmwareRange≤01.39.000

AND

mitsubishielectric gt2104-rtbdMatch-

Node

mitsubishielectric gt2104-pmbd_firmwareRange≤01.39.000

AND

mitsubishielectric gt2104-pmbdMatch-

Node

mitsubishielectric gt2103-pmbd_firmwareRange≤01.39.000

AND

mitsubishielectric gt2103-pmbdMatch-

Node

mitsubishielectric gs2110-wtbd_firmwareRange≤01.39.000

AND

mitsubishielectric gs2110-wtbdMatch-

Node

mitsubishielectric gs2107-wtbd_firmwareRange≤01.39.000

AND

mitsubishielectric gs2107-wtbdMatch-

Node

mitsubishielectric le7-40gu-l_firmwareMatch1.00

AND

mitsubishielectric le7-40gu-lMatch-

Node

mitsubishielectric gs2110-wtbd-n_firmwareRange≤01.39.000

AND

mitsubishielectric gs2110-wtbd-nMatch-

Node

mitsubishielectric gs2107-wtbd-n_firmwareRange≤01.39.000

AND

mitsubishielectric gs2107-wtbd-nMatch-

[
  {
    "product": "GT21 model of GOT2000 series, GS21 model of GOT SIMPLE series, and Tension Controller LE7-40GU-L series",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, GT2104-RTBD V01.39.000 and earlier, GT2104-PMBD V01.39.000 and earlier, and GT2103-PMBD V01.39.000 and earlier), GS21 model of GOT series (GS2110-WTBD V01.39.000 and earlier, GS2107-WTBD V01.39.000 and earlier, GS2110-WTBD-N V01.39.000 and earlier, and GS2107-WTBD-N V01.39.000 and earlier), and Tension Controller LE7-40GU-L series (LE7-40GU-L Screen package data for CC-Link IEF Basic V1.00, LE7-40GU-L Screen package data for MODBUS/TCP V1.00, and LE7-40GU-L Screen package data for SLMP V1.00)"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/vu/JVNVU99277775/index.html
mitsubishielectric	www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-017.pdf
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-017_en.pdf

21 Nov 2024 05:34Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 3.17.5

EPSS0.00316

CWE-125