Login Request a demo
High severity · published Apr 22, 2021
CVE-2021-20590
Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server versions 01.39.010 and prior,…
7.5
CVSS
1.3%
EPSS
No
On KEV
Description
Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server versions 01.39.010 and prior, GOT2000 series GT21 model GT2107-WTBD VNC server versions 01.40.000 and prior, GOT2000 series GT21 model GT2107-WTSD VNC server versions 01.40.000 and prior, GOT SIMPLE series GS21 model GS2110-WTBD-N VNC server versions 01.40.000 and prior and GOT SIMPLE series GS21 model GS2107-WTBD-N VNC server versions 01.40.000 and prior allows a remote unauthenticated attacker to gain unauthorized access via specially crafted packets when the "VNC server" function is used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GG
Got2000 Gt25 Firmware · Mitsubishielectric
through 01.39.010 · source: NVD
GG
Got2000 Gt27 Firmware · Mitsubishielectric
through 01.39.010 · source: NVD
GF
Gs2107-wtbd-n Firmware · Mitsubishielectric
through 01.40.000 · source: NVD
GF
Gs2110-wtbd-n Firmware · Mitsubishielectric
through 01.40.000 · source: NVD
GF
Gt2107-wtbd Firmware · Mitsubishielectric
through 01.40.000 · source: NVD
GF
Gt2107-wtsd Firmware · Mitsubishielectric
through 01.40.000 · source: NVD
Affected product
GG
Got2000 Gt25 Firmware
Mitsubishielectric
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-20590
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-20590
jvn.jp
https://jvn.jp/vu/JVNVU97615777/index.html
www.mitsubishielectric.com
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-001_en.pdf
More from Got2000 Gt25 Firmware
7.5
CVE-2021-20592
Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model communication driver versions 01.19.000…
6.5
CVE-2022-40266
Improper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 01.39.000 and prior, Mitsubishi Electric GOT2000 Series GT25 model FTP…