Vulnerability · Published Aug 5, 2021 · Assigned by Mitsubishi

CVE-2021-20592

High 7.5

In plain English

A high-severity security flaw in GOT2000 series GT27 model; GT25 model; GT23 model; GT SoftGOT2000. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)1.5%top 25.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model communication driver versions 01.19.000 through 01.39.010 and GT23 model communication driver versions 01.19.000 through 01.39.010 and GT SoftGOT2000 versions 1.170C through 1.256S allows a remote unauthenticated attacker to cause DoS condition on the MODBUS/TCP slave communication function of the products by rapidly and repeatedly connecting and disconnecting to and from the MODBUS/TCP communication port on a target. Restart or reset is required to recover.

Affected products (as reported)

Vendor	Product	Versions
n/a	GOT2000 series GT27 model; GT25 model; GT23 model; GT SoftGOT2000	communication driver versions 01.19.000 through 01.39.010versions 1.170C through 1.256S

References

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-007_en.pdf x_refsource_MISC
https://jvn.jp/vu/JVNVU92414172/index.html x_refsource_MISC