CVE-2021-20590

2021-04-2218:54:28

Mitsubishi

www.cve.org

improper authentication

got2000 series

gt27 model

gt25 model

gt21 model

vnc server

remote unauthenticated attacker

EPSS

0.002

Percentile

62.1%

JSON

Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server versions 01.39.010 and prior, GOT2000 series GT21 model GT2107-WTBD VNC server versions 01.40.000 and prior, GOT2000 series GT21 model GT2107-WTSD VNC server versions 01.40.000 and prior, GOT SIMPLE series GS21 model GS2110-WTBD-N VNC server versions 01.40.000 and prior and GOT SIMPLE series GS21 model GS2107-WTBD-N VNC server versions 01.40.000 and prior allows a remote unauthenticated attacker to gain unauthorized access via specially crafted packets when the “VNC server” function is used.

CNA Affected

[
  {
    "product": "GOT2000 series GT27 model",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VNC server version 01.39.010 and prior"
      }
    ]
  },
  {
    "product": "GOT2000 series GT25 model",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VNC server version 01.39.010 and prior"
      }
    ]
  },
  {
    "product": "GOT2000 series GT21 model GT2107-WTBD",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VNC server version 01.40.000 and prior"
      }
    ]
  },
  {
    "product": "GOT2000 series GT21 model GT2107-WTSD",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VNC server version 01.40.000 and prior"
      }
    ]
  },
  {
    "product": "GOT SIMPLE series GS21 model GS2110-WTBD-N",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VNC server version 01.40.000 and prior"
      }
    ]
  },
  {
    "product": "GOT SIMPLE series GS21 model GS2107-WTBD-N",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VNC server version 01.40.000 and prior"
      }
    ]
  }
]