Medium ICSA-22-333-01 1 CVE

Mitsubishi Electric GOT2000

Published Nov 29, 2022 · Updated Nov 29, 2022

Vendor: Mitsubishi Electric Product: GT23 Model FTP server Product: GT25 Model FTP server Product: GT27 Model FTP server

Summary

Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition by sending a specially crafted command.

Vulnerabilities 1

Medium 5.3

CVE-2022-40266

Denial-of-Service (DoS) Vulnerability in FTP Server Function on GOT2000 Series

Improper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 01.39.000 and prior, Mitsubishi Electric GOT2000 Series GT25 model FTP server versions 01.39.000 and prior and Mitsubishi Electric GOT2000 Series GT23…

Mitsubishi Electric GOT2000 Series GT27 model GOT2000 Series GT25 model GOT2000 Series GT23 model ICS / OT

Nov 24, 2022

Revision history

2022-11-29 #1
Publication Date

References

ICS Advisory ICSA-22-333-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-333-01
Recommended Practices
https://www.cisa.gov/uscert/ncas/tips/ST04-014
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf