CVE Feed

    Dashboard / CVE / CVE-2020-5647

    CVE-2020-5647

    Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QMBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QLBDE CoreOS version ’05.65.00.BD’ and earlier, GT1455HS-QTBDE CoreOS version ’05.65.00.BD’ and earlier, and GT1450HS-QMBDE CoreOS version ’05.65.00.BD’ and earlier) allows a remote unauthenticated attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet.

    Published:Nov 6, 2020
    Last Modified:Nov 21, 2024
    EPS:Nov 6, 2020
    EPSS Score:0.00387
    CVSS Score:9.8

    Affected Products

    Vendor
    Mitsubishielectric
    Product
    Coreos
    Vendor
    Mitsubishielectric
    Product
    Gt1450-qlbde
    Vendor
    Mitsubishielectric
    Product
    Gt1450-qmbde
    Vendor
    Mitsubishielectric
    Product
    Gt1450hs-qmbde
    Vendor
    Mitsubishielectric
    Product
    Gt1455-qtbde
    Vendor
    Mitsubishielectric
    Product
    Gt1455hs-qtbde

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2020-5649 (CVSS 7.5) — Resource management error vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 …
    CVE-2020-5648 (CVSS 9.8) — Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP fun…
    CVE-2020-5646 (CVSS 7.5) — NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 …
    CVE-2020-5645 (CVSS 7.5) — Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (G…
    CVE-2020-5644 (CVSS 9.8) — Buffer overflow vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT…
    CVE-2020-5600 (CVSS 7.5) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…
    CVE-2020-5598 (CVSS 7.5) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…
    CVE-2020-5599 (CVSS 9.8) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…
    CVE-2020-5595 (CVSS 9.8) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…
    CVE-2020-5597 (CVSS 7.5) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High