Vulnerabilities > CVE-2020-5647 - Unspecified vulnerability in Mitsubishielectric Coreos 05.65.00.Bd
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QMBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QLBDE CoreOS version ’05.65.00.BD’ and earlier, GT1455HS-QTBDE CoreOS version ’05.65.00.BD’ and earlier, and GT1450HS-QMBDE CoreOS version ’05.65.00.BD’ and earlier) allows a remote unauthenticated attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 2 | |
| Hardware | 5 |
References
- https://jvn.jp/vu/JVNVU99562395/index.html
- https://jvn.jp/vu/JVNVU99562395/index.html
- https://us-cert.cisa.gov/ics/advisories/icsa-20-310-02
- https://us-cert.cisa.gov/ics/advisories/icsa-20-310-02
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-014.pdf
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-014.pdf
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf