CVE-2021-20590

🗓️ 22 Apr 2021 18:54:28Reported by MitsubishiType

Improper authentication vulnerability in multiple GOT2000 and GOT SIMPLE series VNC servers allows remote unauthenticated attacker to gain unauthorized access

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2021-20590	22 Apr 202119:15	–	attackerkb
BDU FSTEC	The vulnerability of Mitsubishi Electric’s graphic control panel software for the GOT2000 and GOT SIMPLE series lies in authentication errors, allowing attackers to gain unauthorized access to protected information.	5 May 202100:00	–	bdu_fstec
CNNVD	Mitsubishi Electric GOT2000 授权问题漏洞	22 Apr 202100:00	–	cnnvd
CVE	CVE-2021-20590	22 Apr 202118:54	–	cve
EUVD	EUVD-2021-8008	3 Oct 202520:07	–	euvd
ICS	Mitsubishi Electric GOT (Update A)	22 Apr 202100:00	–	ics
NVD	CVE-2021-20590	22 Apr 202119:15	–	nvd
OSV	CVE-2021-20590	22 Apr 202119:15	–	osv
Prion	Authentication flaw	22 Apr 202119:15	–	prion
RedhatCVE	CVE-2021-20590	22 May 202520:59	–	redhatcve

[
  {
    "product": "GOT2000 series GT27 model",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VNC server version 01.39.010 and prior"
      }
    ]
  },
  {
    "product": "GOT2000 series GT25 model",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VNC server version 01.39.010 and prior"
      }
    ]
  },
  {
    "product": "GOT2000 series GT21 model GT2107-WTBD",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VNC server version 01.40.000 and prior"
      }
    ]
  },
  {
    "product": "GOT2000 series GT21 model GT2107-WTSD",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VNC server version 01.40.000 and prior"
      }
    ]
  },
  {
    "product": "GOT SIMPLE series GS21 model GS2110-WTBD-N",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VNC server version 01.40.000 and prior"
      }
    ]
  },
  {
    "product": "GOT SIMPLE series GS21 model GS2107-WTBD-N",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VNC server version 01.40.000 and prior"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/vu/JVNVU97615777/index.html
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-001_en.pdf

02 Aug 2021 17:51Current

8High risk

Vulners AI Score8

EPSS0.01275