CVE-2021-20589

🗓️ 19 May 2021 10:28:23Reported by MitsubishiType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 47 Views

Vulnerability in GOT2000 and related models allows remote denial of service via crafted packets.

Reporter	Title	Published	Views	Family All 9
CNNVD	多款 Mitsubishi Electric 设备缓冲区错误漏洞	11 May 202100:00	–	cnnvd
Cvelist	CVE-2021-20589	19 May 202110:28	–	cvelist
EUVD	EUVD-2021-8007	3 Oct 202520:07	–	euvd
ICS	Mitsubishi Electric GOT and Tension Controller (Update A)	11 May 202100:00	–	ics
NVD	CVE-2021-20589	19 May 202111:15	–	nvd
OSV	CVE-2021-20589	19 May 202111:15	–	osv
Prion	Buffer overflow	19 May 202111:15	–	prion
RedhatCVE	CVE-2021-20589	22 May 202519:07	–	redhatcve
Tenable Nessus	Mitsubishi Electric GOT and Tension Controller (CVE-2021-20589)	7 Nov 202300:00	–	nessus

NVD

Node

mitsubishi gt27_firmwareRange01.19.000–01.38.000

AND

mitsubishi gt27Match-

Node

mitsubishi gt25_firmwareRange01.19.000–01.38.000

AND

mitsubishi gt25Match-

Node

mitsubishi gt23_firmwareRange01.19.000–01.38.000

AND

mitsubishi gt23Match-

Node

mitsubishi gt21_firmwareRange01.21.000–01.39.000

AND

mitsubishi gt21Match-

Node

mitsubishi gs21_firmwareRange01.21.000–01.39.000

AND

mitsubishi gs21Match-

Node

mitsubishi gt_softgot2000_firmwareRange1.170c–1.250l

AND

mitsubishi gt_softgot2000Match-

[
  {
    "product": "GOT2000 series; GOT SIMPLE series; GT SoftGOT2000; Tension Controller",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "GT27 model communication driver versions 01.19.000 through 01.38.000, GT25 model communication driver versions 01.19.000 through 01.38.000, GT23 model communication driver versions 01.19.000 through 01.38.000, GT21 model communication driver versions 01.21.000 through 01.39.000"
      },
      {
        "status": "affected",
        "version": "GS21 model communication driver versions 01.21.000 through 01.39.000"
      },
      {
        "status": "affected",
        "version": "GT SoftGOT2000 versions 1.170C through 1.250L"
      },
      {
        "status": "affected",
        "version": "LE7-40GU-L Screen package data for MODBUS/TCP V1.00"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/vu/JVNVU99895108/index.html
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-002_en.pdf

21 Nov 2024 05:46Current

7.5High risk

Vulners AI Score7.5

CVSS 25

CVSS 3.17.5

EPSS0.00326

CWE-119