Lucene search

[email protected]CVE-2020-5675

HistoryDec 04, 2020 - 8:15 a.m.

CVE-2020-5675

2020-12-0408:15:11

CWE-125

[email protected]

web.nvd.nist.gov

vulnerability

gt21

gs21

got2000

got

denial-of-service

nvd

out-of-bounds read

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

73.0%

JSON

Out-of-bounds read vulnerability in GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, GT2104-RTBD V01.39.000 and earlier, GT2104-PMBD V01.39.000 and earlier, and GT2103-PMBD V01.39.000 and earlier), GS21 model of GOT series (GS2110-WTBD V01.39.000 and earlier, GS2107-WTBD V01.39.000 and earlier, GS2110-WTBD-N V01.39.000 and earlier, and GS2107-WTBD-N V01.39.000 and earlier), and Tension Controller LE7-40GU-L series (LE7-40GU-L Screen package data for CC-Link IEF Basic V1.00, LE7-40GU-L Screen package data for MODBUS/TCP V1.00, and LE7-40GU-L Screen package data for SLMP V1.00) allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted packet. As a result, deterioration of communication performance or a denial-of-service (DoS) condition of the TCP communication functions of the products may occur.

Affected configurations

NVD

Node

mitsubishielectricgt2107-wtbd_firmwareRange≤01.39.000

AND

mitsubishielectricgt2107-wtbdMatch-

Node

mitsubishielectricgt2107-wtsd_firmwareRange≤01.39.000

AND

mitsubishielectricgt2107-wtsdMatch-

Node

mitsubishielectricgt2104-rtbd_firmwareRange≤01.39.000

AND

mitsubishielectricgt2104-rtbdMatch-

Node

mitsubishielectricgt2104-pmbd_firmwareRange≤01.39.000

AND

mitsubishielectricgt2104-pmbdMatch-

Node

mitsubishielectricgt2103-pmbd_firmwareRange≤01.39.000

AND

mitsubishielectricgt2103-pmbdMatch-

Node

mitsubishielectricgs2110-wtbd_firmwareRange≤01.39.000

AND

mitsubishielectricgs2110-wtbdMatch-

Node

mitsubishielectricgs2107-wtbd_firmwareRange≤01.39.000

AND

mitsubishielectricgs2107-wtbdMatch-

Node

mitsubishielectricle7-40gu-l_firmwareMatch1.00

AND

mitsubishielectricle7-40gu-lMatch-

Node

mitsubishielectricgs2110-wtbd-n_firmwareRange≤01.39.000

AND

mitsubishielectricgs2110-wtbd-nMatch-

Node

mitsubishielectricgs2107-wtbd-n_firmwareRange≤01.39.000

AND

mitsubishielectricgs2107-wtbd-nMatch-

CPENameOperatorVersion
mitsubishielectric:gt2107-wtbd_firmwaremitsubishielectric gt2107-wtbd firmwarele01.39.000

CPE	Name	Operator	Version
mitsubishielectric:gt2107-wtbd_firmware	mitsubishielectric gt2107-wtbd firmware	le	01.39.000

CNA Affected

[
  {
    "product": "GT21 model of GOT2000 series, GS21 model of GOT SIMPLE series, and Tension Controller LE7-40GU-L series",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, GT2104-RTBD V01.39.000 and earlier, GT2104-PMBD V01.39.000 and earlier, and GT2103-PMBD V01.39.000 and earlier), GS21 model of GOT series (GS2110-WTBD V01.39.000 and earlier, GS2107-WTBD V01.39.000 and earlier, GS2110-WTBD-N V01.39.000 and earlier, and GS2107-WTBD-N V01.39.000 and earlier), and Tension Controller LE7-40GU-L series (LE7-40GU-L Screen package data for CC-Link IEF Basic V1.00, LE7-40GU-L Screen package data for MODBUS/TCP V1.00, and LE7-40GU-L Screen package data for SLMP V1.00)"
      }
    ]
  }
]

References

jvn.jp/vu/JVNVU99277775/index.html

www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-017.pdf

www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-017_en.pdf

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

73.0%

JSON

Related for CVE-2020-5675

prion1 nvd1 nessus1 cvelist1 ics1