Lucene search

[email protected]CVE-2022-40268

HistoryFeb 02, 2023 - 8:15 a.m.

CVE-2022-40268

2023-02-0208:15:07

CWE-1021

[email protected]

web.nvd.nist.gov

cve-2022-40268

mitsubishi electric

gt27

gt25

clickjacking

vulnerability

nvd

security

remote attack

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.4%

JSON

Improper Restriction of Rendered UI Layers or Frames vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.14.000 to 01.47.000, Mitsubishi Electric Corporation GOT2000 Series GT25 model versions 01.14.000 to 01.47.000 and Mitsubishi Electric Corporation GT SoftGOT2000 versions 1.265B to 1.285X allows a remote unauthenticated attacker to lead legitimate users to perform unintended operations through clickjacking.

Affected configurations

NVD

Node

mitsubishielectricgt_softgot2000Range1.265b–1.290c

Node

mitsubishielectricgt27_firmwareRange01.14.000–01.48.000

AND

mitsubishielectricgt27Match-

Node

mitsubishielectricgt25_firmwareRange01.14.000–01.48.000

AND

mitsubishielectricgt25Match-

CPENameOperatorVersion
mitsubishielectric:gt_softgot2000mitsubishielectric gt softgot2000lt1.290c

CPE	Name	Operator	Version
mitsubishielectric:gt_softgot2000	mitsubishielectric gt softgot2000	lt	1.290c

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "GOT2000 Series GT27 model",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "01.14.000 to 01.47.000"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GOT2000 Series GT25 model",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "01.14.000 to 01.47.000"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GT SoftGOT2000",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "1.265B to 1.285X"
      }
    ]
  }
]