CVE Feed

    Dashboard / CVE / CVE-2020-5598

    CVE-2020-5598

    TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains an improper access control vulnerability, which may which may allow a remote attacker tobypass access restriction and stop the network functions of the products or execute a malicious program via a specially crafted packet.

    Published:Jul 7, 2020
    Last Modified:Nov 21, 2024
    EPS:Jul 7, 2020
    EPSS Score:0.00141
    CVSS Score:7.5

    Affected Products

    Vendor
    Mitsubishielectric
    Product
    Coreos
    Vendor
    Mitsubishielectric
    Product
    Got2000 Gt23
    Vendor
    Mitsubishielectric
    Product
    Got2000 Gt25
    Vendor
    Mitsubishielectric
    Product
    Got2000 Gt27

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2020-5649 (CVSS 7.5) — Resource management error vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 …
    CVE-2020-5648 (CVSS 9.8) — Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP fun…
    CVE-2020-5647 (CVSS 9.8) — Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 se…
    CVE-2020-5646 (CVSS 7.5) — NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 …
    CVE-2020-5645 (CVSS 7.5) — Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (G…
    CVE-2020-5644 (CVSS 9.8) — Buffer overflow vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT…
    CVE-2020-5600 (CVSS 7.5) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…
    CVE-2020-5599 (CVSS 9.8) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…
    CVE-2020-5595 (CVSS 9.8) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…
    CVE-2020-5597 (CVSS 7.5) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High