Mitsubishi Electric GOT2000 Series and GT SoftGOT2000
Successful exploitation of these vulnerabilities could allow attackers to perform unintended operations through clickjacking (an attack that tricks users into clicking an invisible or disguised webpage element) or allow attackers to disclose sensitive information from their browsers or impersonate legitimate users by abusing inappropriate HTML attributes.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-40269US | high8.1 | — | ||
Authentication Bypass by Spoofing vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.14.000 to 01.47.000, Mitsubishi Electric Corporation GOT200… | ||||
| CVE-2022-40268US | medium4.7 | — | ||
Improper Restriction of Rendered UI Layers or Frames vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.14.000 to 01.47.000, Mitsubishi Electric… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- MitigationGT SoftGOT2000
Disable GOT Mobile Function.
- MitigationGT SoftGOT2000
Disable GOT Mobile Function.
- MitigationGT25 model
Disable GOT Mobile Function.
- MitigationGT25 model
Disable GOT Mobile Function.
- MitigationGT27 model
Disable GOT Mobile Function.
- MitigationGT27 model
Disable GOT Mobile Function.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan