Description
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains an improper access control vulnerability, which may which may allow a remote attacker tobypass access restriction and stop the network functions of the products or execute a malicious program via a specially crafted packet.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mitsubishi Electric | GOT2000 series GT27, GT25, and GT23 | CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model | — |
Advisories 1
- ICSA-20-189-02 Mitsubishi Electric GOT2000 Series CISA ICS & IT advisories · Jul 7, 2020