● CVE — High
CVE-2021-20601
VendormitsubishielectricProductgt softgot2000, got2000 gt2103-pmbd firmware, got2000 gt2103-pmbds2 firmware, got2000 gt2103-pmbds firmware, got2000 gt2103-pmbls firmware, got2000 gt2104-rtbd firmware, got2000 gt2107-wtbd firmware, got2000 gt2308-vtba firmware, got2000 gt2308-vtbd firmware, got2000 gt2310-vtba firmware, got2000 gt2310-vtbd firmware, got2000 gt2505hs-vtbd firmware, got2000 gt2506hs-vtbd firmware, got2000 gt2507-wtbd firmware, got2000 gt2507-wtsd firmware, got2000 gt2507t-wtsd firmware, got2000 gt2510-vtba firmware, got2000 gt2510-wxtbd firmware, got2000 gt2510-wxtsd firmware, got2000 gt2512-stba firmware, got2000 gt2512-stbd firmware, got2000 gt2512-wxtbd firmware, got2000 gt2512-wxtsd firmware, got simple gs2107-wtbd firmware, got simple gs2110-wtbd firmwareDiscoveredNov 23, 2021UpdatedNov 21, 2024
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.