CVE Feed

    Dashboard / CVE / CVE-2021-20592

    CVE-2021-20592

    Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model communication driver versions 01.19.000 through 01.39.010 and GT23 model communication driver versions 01.19.000 through 01.39.010 and GT SoftGOT2000 versions 1.170C through 1.256S allows a remote unauthenticated attacker to cause DoS condition on the MODBUS/TCP slave communication function of the products by rapidly and repeatedly connecting and disconnecting to and from the MODBUS/TCP communication port on a target. Restart or reset is required to recover.

    Published:Aug 5, 2021
    Last Modified:Nov 21, 2024
    EPS:Aug 5, 2021
    EPSS Score:0.00388
    CVSS Score:7.5

    Affected Products

    Vendor
    Mitsubishielectric
    Product
    Got2000 Gt23
    Vendor
    Mitsubishielectric
    Product
    Got2000 Gt23 Firmware
    Vendor
    Mitsubishielectric
    Product
    Got2000 Gt25
    Vendor
    Mitsubishielectric
    Product
    Got2000 Gt25 Firmware
    Vendor
    Mitsubishielectric
    Product
    Got2000 Gt27
    Vendor
    Mitsubishielectric
    Product
    Got2000 Gt27 Firmware
    Vendor
    Mitsubishielectric
    Product
    Gt Softgot2000

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-662 Improper Synchronization

    Related CVEs

    CVE-2022-40266 (CVSS 5.3) — Improper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 0…
    CVE-2020-5600 (CVSS 7.5) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…
    CVE-2020-5599 (CVSS 9.8) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…
    CVE-2020-5598 (CVSS 7.5) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…
    CVE-2020-5595 (CVSS 9.8) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…
    CVE-2020-5597 (CVSS 7.5) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…
    CVE-2020-5596 (CVSS 7.5) — TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and ear…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High