What’s Vulnerable › Vulnerabilities
CVE-2021-20601
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-11-23 · updated 2026-06-17
- Weakness: CWE-20
Description
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.
Affected products
- Mitsubishielectric Got2000 Gt2103-Pmbd Firmware: all versions
- Mitsubishielectric Got2000 Gt2103-Pmbds2 Firmware: all versions
- Mitsubishielectric Got2000 Gt2103-Pmbds Firmware: all versions
- Mitsubishielectric Got2000 Gt2103-Pmbls Firmware: all versions
- Mitsubishielectric Got2000 Gt2104-Rtbd Firmware: all versions
- Mitsubishielectric Got2000 Gt2107-Wtbd Firmware: all versions
- Mitsubishielectric Got2000 Gt2308-Vtba Firmware: all versions
- Mitsubishielectric Got2000 Gt2308-Vtbd Firmware: all versions
- Mitsubishielectric Got2000 Gt2310-Vtba Firmware: all versions
- Mitsubishielectric Got2000 Gt2310-Vtbd Firmware: all versions
- Mitsubishielectric Got2000 Gt2505-Vtbd Firmware: all versions
- Mitsubishielectric Got2000 Gt2505Hs-Vtbd Firmware: all versions
- Mitsubishielectric Got2000 Gt2506Hs-Vtbd Firmware: all versions
- Mitsubishielectric Got2000 Gt2507-Wtbd Firmware: all versions
- Mitsubishielectric Got2000 Gt2507-Wtsd Firmware: all versions
- Mitsubishielectric Got2000 Gt2507T-Wtsd Firmware: all versions
- Mitsubishielectric Got2000 Gt2508-Vtba Firmware: all versions
- Mitsubishielectric Got2000 Gt2508-Vtbd Firmware: all versions
- Mitsubishielectric Got2000 Gt2508-Vtwa Firmware: all versions
- Mitsubishielectric Got2000 Gt2508-Vtwd Firmware: all versions
- Mitsubishielectric Got2000 Gt2510-Vtba Firmware: all versions
- Mitsubishielectric Got2000 Gt2510-Vtbd Firmware: all versions
- Mitsubishielectric Got2000 Gt2510-Vtwa Firmware: all versions
- Mitsubishielectric Got2000 Gt2510-Vtwd Firmware: all versions
- Mitsubishielectric Got2000 Gt2510-Wxtbd Firmware: all versions
- Mitsubishielectric Got2000 Gt2510-Wxtsd Firmware: all versions
- Mitsubishielectric Got2000 Gt2512-Stba Firmware: all versions
- Mitsubishielectric Got2000 Gt2512-Stbd Firmware: all versions
- Mitsubishielectric Got2000 Gt2512-Wxtbd Firmware: all versions
- Mitsubishielectric Got2000 Gt2512-Wxtsd Firmware: all versions
References
- https://jvn.jp/vu/JVNVU98072504
- https://us-cert.cisa.gov/ics/advisories/icsa-21-320-02
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2021-018.pdf
- https://jvn.jp/vu/JVNVU98072504
- https://us-cert.cisa.gov/ics/advisories/icsa-21-320-02
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2021-018.pdf
Get alerted when CVE-2021-20601 or the next vulnerability affects your stack