Lucene search

[email protected]CVE-2022-40269

HistoryFeb 02, 2023 - 8:15 a.m.

CVE-2022-40269

2023-02-0208:15:07

CWE-290

[email protected]

web.nvd.nist.gov

mitsubishi electric

got2000

gt27

gt25

gt softgot2000

authentication bypass

spoofing

vulnerability

nvd

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

7.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.5%

JSON

Authentication Bypass by Spoofing vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.14.000 to 01.47.000, Mitsubishi Electric Corporation GOT2000 Series GT25 model versions 01.14.000 to 01.47.000 and Mitsubishi Electric Corporation GT SoftGOT2000 versions 1.265B to 1.285X allows a remote unauthenticated attacker to disclose sensitive information from users’ browsers or spoof legitimate users by abusing inappropriate HTML attributes.

Affected configurations

NVD

Node

mitsubishielectricgt_softgot2000Range1.265b–1.290c

Node

mitsubishielectricgt27_firmwareRange01.14.000–01.48.000

AND

mitsubishielectricgt27Match-

Node

mitsubishielectricgt25_firmwareRange01.14.000–01.48.000

AND

mitsubishielectricgt25Match-

CPENameOperatorVersion
mitsubishielectric:gt_softgot2000mitsubishielectric gt softgot2000lt1.290c

CPE	Name	Operator	Version
mitsubishielectric:gt_softgot2000	mitsubishielectric gt softgot2000	lt	1.290c

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "GOT2000 Series GT27 model",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "01.14.000 to 01.47.000"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GOT2000 Series GT25 model",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "01.14.000 to 01.47.000"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GT SoftGOT2000",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "1.265B to 1.285X"
      }
    ]
  }
]