CVE-2020-5648
mediumPriorität · verfolgen · 40EPSS 0.035 · 89. PerzentilEUUSEPSS · bewertet 2026-10-28
Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier, GT1455HS-QTBDE CoreOS version "05.65.00.BD" and earlier, and GT1450HS-QMBDE CoreOS version "05.65.00.BD" and earlier) allows unauthenticated attackers on adjacent network to stop the network functions of the products via a specially crafted packet.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationGT1450-QLBDEcisa_csaf_ot
Mitsubishi Electric recommends users update their products by downloading and applying the latest versions. For more information about steps to take to update to the newest version, please see the vulnerability information on the Mitsubishi website. To further reduce risk, restrict access to the product only from trusted networks and hosts. Contact a Mitsubishi Electric representative for additional details.
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf - MitigationGT1450-QMBDEcisa_csaf_ot
Mitsubishi Electric recommends users update their products by downloading and applying the latest versions. For more information about steps to take to update to the newest version, please see the vulnerability information on the Mitsubishi website. To further reduce risk, restrict access to the product only from trusted networks and hosts. Contact a Mitsubishi Electric representative for additional details.
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf - MitigationGT1450HS-QMBDEcisa_csaf_ot
Mitsubishi Electric recommends users update their products by downloading and applying the latest versions. For more information about steps to take to update to the newest version, please see the vulnerability information on the Mitsubishi website. To further reduce risk, restrict access to the product only from trusted networks and hosts. Contact a Mitsubishi Electric representative for additional details.
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf - MitigationGT1455-QTBDEcisa_csaf_ot
Mitsubishi Electric recommends users update their products by downloading and applying the latest versions. For more information about steps to take to update to the newest version, please see the vulnerability information on the Mitsubishi website. To further reduce risk, restrict access to the product only from trusted networks and hosts. Contact a Mitsubishi Electric representative for additional details.
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf - MitigationGT1455HS-QTBDEcisa_csaf_ot
Mitsubishi Electric recommends users update their products by downloading and applying the latest versions. For more information about steps to take to update to the newest version, please see the vulnerability information on the Mitsubishi website. To further reduce risk, restrict access to the product only from trusted networks and hosts. Contact a Mitsubishi Electric representative for additional details.
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–critical · 6.5–9.8
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (12)
Betroffene Produkte und Versionsbereiche.
- Mitsubishi Electric Corporation GT14 Model of GOT 1000 series≤ (GT1455-QTBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QMBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QLBDE CoreOS version ’05.65.00.BD’ and earlier, GT1455HS-QTBDE CoreOS version ’05.65.00.BD’ and earlier, and GT1450HS-QMBDE CoreOS version ’05.65.00.BD’ and earlier)enisa_euvdEU
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-20-310-02Mitsubishi Electric GT14 Model of GOT1000 Series2020-11-05icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities by an attacker may result in a denial-of-service condition or code execution.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (14)
Externe Belege — Patches, Meldungen, Analysen.
- https://jvn.jp/vu/JVNVU99562395/index.htmlcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-5648cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-20-310-02cnnvd
- https://www.auscert.org.au/bulletins/ESB-2020.3905/cnnvd
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-014.pdfcnnvd
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdfcnnvd
- https://jvn.jp/vu/JVNVU99562395/index.htmlenisa_euvd
- https://us-cert.cisa.gov/ics/advisories/icsa-20-310-02enisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan