ICSA-23-215-01

icsaUScisa_csaf_ot

Mitsubishi Electric GOT2000 and GOT SIMPLE

view advisory published 2023-08-03

Successful exploitation of this vulnerability could allow an attacker to hijack data connections or prevent legitimate users from establishing data connections.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-3373UScritical9.1OT elevated—
Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT21 model versions 01.49.000 and prior and GOT SIMPLE Series GS21 mode…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • MitigationGOT SIMPLE, GS21 model

    After writing the required package data to the GOT, refer to the and check that the software has been updated to the fixed versions.

  • MitigationGOT2000 Series, GT21 model

    After writing the required package data to the GOT, refer to the and check that the software has been updated to the fixed versions.

  • FixedGOT SIMPLE, GS21 model

    GOT SIMPLE, GS21 model version 01.50.000 or later

  • FixedGOT2000 Series, GT21 model

    GOT2000 Series, GT21 model version 01.50.000 or later

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan