Mitsubishi Electric GT and GOT Series Products
Successful exploitation of this vulnerability could allow an attacker to obtain plaintext passwords by sniffing packets containing encrypted passwords and decrypting the encrypted passwords.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-0525US | high7.5 | — | ||
Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 mo… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-215-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-215-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationGOT SIMPLE (Models GS25, GS21)
Encrypt communication paths to the affected product with a VPN or other means.
- MitigationGOT2000 (Models GT21, GT23, GT25, GT27)
Encrypt communication paths to the affected product with a VPN or other means.
- MitigationGT Designer3 Version1 (GOT2000)
Encrypt communication paths to the affected product with a VPN or other means.
- MitigationGT SoftGOT2000
Encrypt communication paths to the affected product with a VPN or other means.
- FixedGOT SIMPLE (Models GS25, GS21)
GOT SIMPLE (Models GS25, GS21): Update to v01.50.000 or later
- FixedGOT2000 (Models GT21, GT23, GT25, GT27)
GOT2000 (Models GT21, GT23, GT25, GT27): Update to v01.50.000 or later
- FixedGT Designer3 Version1 (GOT2000)
GT Designer3 Version1 (GOT2000): Update to v1.300N or later
- FixedGT SoftGOT2000
GT SoftGOT2000: Update to v1.300N or later
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan