CVE Feed

    Dashboard / CVE / CVE-2020-5645

    CVE-2020-5645

    Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier, GT1455HS-QTBDE CoreOS version "05.65.00.BD" and earlier, and GT1450HS-QMBDE CoreOS version "05.65.00.BD" and earlier) allows a remote unauthenticated attacker to stop the network functions of the products via a specially crafted packet.

    Published:Nov 6, 2020
    Last Modified:Nov 21, 2024
    EPS:Nov 6, 2020
    EPSS Score:0.0071
    CVSS Score:7.5

    Affected Products

    Vendor
    Mitsubishielectric
    Product
    Coreos
    Vendor
    Mitsubishielectric
    Product
    Gt1450-qlbde
    Vendor
    Mitsubishielectric
    Product
    Gt1450-qmbde
    Vendor
    Mitsubishielectric
    Product
    Gt1450hs-qmbde
    Vendor
    Mitsubishielectric
    Product
    Gt1455-qtbde
    Vendor
    Mitsubishielectric
    Product
    Gt1455hs-qtbde

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-384 Session Fixation

    Related CVEs

    CVE-2020-5649 (CVSS 7.5) — Resource management error vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 …
    CVE-2020-5648 (CVSS 9.8) — Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP fun…
    CVE-2020-5647 (CVSS 9.8) — Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 se…
    CVE-2020-5646 (CVSS 7.5) — NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 …
    CVE-2020-5644 (CVSS 9.8) — Buffer overflow vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT…
    CVE-2020-5600 (CVSS 7.5) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…
    CVE-2020-5598 (CVSS 7.5) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…
    CVE-2020-5599 (CVSS 9.8) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…
    CVE-2020-5595 (CVSS 9.8) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…
    CVE-2020-5597 (CVSS 7.5) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High