Mitsubishi (CVE-2020-5598) (deprecated)

Plugin deprecated because GOT HMIs are not supported This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable, Inc. @DEPRECATED@ Disabled on 2023/06/29 as we don't support GOT HMIs...

Multiple vulnerabilities in TCP/IP function on Mitsubishi Electric GOT2000 series

Overview TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series GT27, GT25, and GT23 contains multiple vulnerabilities listed below. Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-119 - CVE-2020-5595 Session Fixation CWE-384 - CVE-2020-5596 NUL...

CVE-2020-5598

CVE-2020-5598 affects Mitsubishi Electric GOT2000 CoreOS on GT27/GT25/GT23 (GOT2000 series). The JVN/CNVD/Red Hat and ICS sources describe an Improper Access Control vulnerability (CWE-284) in the TCP/IP function of CoreOS -Y and earlier. With a specially crafted packet, an unauthenticated remote...