CVE-2020-5599

The CVE-2020-5599 issue affects Mitsubishi Electric GOT2000 series GT27/GT25/GT23 CoreOS prior to version -Z. It is an improper neutralization of argument delimiters in a command (Argument Injection, CWE-88) vulnerability that may allow a remote attacker to stop network functions or run a malicio...

CVE-2020-5595

The CVE-2020-5595 issue affects Mitsubishi Electric GOT2000 CoreOS versions -Y and earlier installed on GT27/GT25/GT23 models. The vulnerability is a buffer overflow in the TCP/IP function within the core firmware, which could crash the device and enable remote code execution or network disruptio...

CVE-2020-5597

Mitsubishi Electric GOT2000 series GT27/GT25/GT23 devices running CoreOS -Y or earlier are affected by CVE-2020-5597 (NULL pointer dereference in TCP/IP handling). This can allow a remote attacker to stop network functions or crash the device via a crafted packet, potentially enabling remote code...

CVE-2020-5596

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model does not properly manage sessions, which may allow a remote attacker to stop the network functions of the products or execute a...

CVE-2020-5597

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model contains a null pointer dereference vulnerability, which may allow a remote attacker to stop the network functions of the products ...

CVE-2020-5595

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model contains a buffer overflow vulnerability, which may allow a remote attacker to stop the network functions of the products or execut...

CVE-2020-5596

The CVE-2020-5596 entry concerns Mitsubishi Electric GOT2000 series GT27/GT25/GT23 devices running CoreOS -Y or earlier. The vulnerability stems from improper session management in the TCP/IP function of the firmware, which could allow a remote attacker to stop network functions or execute a mali...

Mitsubishi Electric GOT2000 Series

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Mitsubishi Electric Equipment: GOT2000 Series Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Session Fixation, NULL Pointer Dereference, Improper Access...