PT-2021-14070

Name of the Vulnerable Software and Affected Versions: GOT2000 series GT21 model GT2107-WTBD all versions GOT2000 series GT21 model GT2107-WTSD all versions GOT2000 series GT21 model GT2104-RTBD all versions GOT2000 series GT21 model GT2104-PMBD all versions GOT2000 series GT21 model GT2103-PMBD...

PT-2021-14071

Name of the Vulnerable Software and Affected Versions: GOT2000 series GT21 model GT2107-WTBD all versions GOT2000 series GT21 model GT2107-WTSD all versions GOT2000 series GT21 model GT2104-RTBD all versions GOT2000 series GT21 model GT2104-PMBD all versions GOT2000 series GT21 model GT2103-PMBD...

Mitsubishi Electric GOT and Tension Controller (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: GOT and Tension Controller Vulnerabilities: Improper Handling of Exceptional Conditions, Improper Input Validation --------- Begin Update A Part 1 of 2 ---------...

Got Normalize-url Library Uncontrolled Resource Consumption DoS

The vulnerability of the Got and Normalize-url libraries for Node.js is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Buffer overflow

Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.38.000, GT25 model communication driver versions 01.19.000 through 01.38.000, GT23 model communication driver versions 01.19.000 through 01.38.000 and GT21 model...

PT-2021-14062

Name of the Vulnerable Software and Affected Versions: GOT2000 series GT27 model communication driver versions 01.19.000 through 01.38.000 GOT2000 series GT25 model communication driver versions 01.19.000 through 01.38.000 GOT2000 series GT23 model communication driver versions 01.19.000 through...

Mitsubishi Electric GOT and Tension Controller (Update A)

1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: GOT and Tension Controller Vulnerability: Buffer Access with Incorrect Length Value 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-21-131-02...

Mitsubishi Electric Graphic Control Panel Authentication Bypass

The vulnerability of Mitsubishi Electric’s GOT2000 and GOT SIMPLE graphic control panels relates to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2021-20590

Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server versions 01.39.010 and prior, GOT2000 series GT21 model GT2107-WTBD VNC server versions 01.40.000 and prior, GOT2000 series GT21 model GT2107-WTSD VNC...

CVE-2021-20590

Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server versions 01.39.010 and prior, GOT2000 series GT21 model GT2107-WTBD VNC server versions 01.40.000 and prior, GOT2000 series GT21 model GT2107-WTSD VNC...

Authentication flaw

Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server versions 01.39.010 and prior, GOT2000 series GT21 model GT2107-WTBD VNC server versions 01.40.000 and prior, GOT2000 series GT21 model GT2107-WTSD VNC...

CVE-2021-20590: Improper Authentication

Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server versions 01.39.010 and prior, GOT2000 series GT21 model GT2107-WTBD VNC server versions 01.40.000 and prior, GOT2000 series GT21 model GT2107-WTSD VNC...

Mitsubishi Electric GOT (Update A)

1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: GOT Vulnerability: Improper Authentication 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-21-112-02 Mitsubishi Electric GOT that was published...

Heap overflow

Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions...

Input validation

Improper handling of length parameter inconsistency vulnerability in Mitsubishi Electric FA Engineering SoftwareCPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR...

CVE-2020-5675

CVE-2020-5675 is an out-of-bounds read (CWE-125) affecting Mitsubishi Electric GOT2000 GT21 models (GT2107-WTBD/WTSD v01.39.000 and earlier; GT2104-RTBD/PMBD v01.39.000 and earlier; GT2103-PMBD v01.39.000 and earlier), GS21 models (GS2110-WTBD/WTBD-N v01.39.000 and earlier; GS2107-WTBD/WTBD-N v01...

PT-2020-18635

Name of the Vulnerable Software and Affected Versions GOT2000 series GT21 model versions prior to V01.39.000 GOT series GS21 model versions prior to V01.39.000 Tension Controller LE7-40GU-L series versions prior to V1.00 Description An out-of-bounds read issue allows a remote attacker to cause a...

binutils security update

2.30-79.0.1 - Forward-port Oracle patches from 2.30-75.0.1 - Reviewed-by: Jose E. Marchesi 2.30-79 - Fix x86 assemblers handling of non-8-bit displacements. 1869401 2.30-77 - Add tests missing from PTGNUSEGMENT patch. 1870039 2.30-75.0.1 - Forward-port Oracle patches to OL8.3 beta. 2.30-76 - Have...

CVE-2020-5645

Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier, GT1455HS-QTBDE CoreOS...

CVE-2020-5646

NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier, GT1455HS-QTBDE...