CVE-2020-5646
mediumpriority · track · 31EPSS 0.042 · 91 %ileEUUSEPSS · scored 2026-10-28
NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier, GT1455HS-QTBDE CoreOS version "05.65.00.BD" and earlier, and GT1450HS-QMBDE CoreOS version "05.65.00.BD" and earlier) allows a remote unauthenticated attacker to stop the network functions of the products via a specially crafted packet.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
No vendor fix yet; a mitigation is available.
- MitigationGT1450-QLBDEcisa_csaf_ot
Mitsubishi Electric recommends users update their products by downloading and applying the latest versions. For more information about steps to take to update to the newest version, please see the vulnerability information on the Mitsubishi website. To further reduce risk, restrict access to the product only from trusted networks and hosts. Contact a Mitsubishi Electric representative for additional details.
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf - MitigationGT1450-QMBDEcisa_csaf_ot
Mitsubishi Electric recommends users update their products by downloading and applying the latest versions. For more information about steps to take to update to the newest version, please see the vulnerability information on the Mitsubishi website. To further reduce risk, restrict access to the product only from trusted networks and hosts. Contact a Mitsubishi Electric representative for additional details.
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf - MitigationGT1450HS-QMBDEcisa_csaf_ot
Mitsubishi Electric recommends users update their products by downloading and applying the latest versions. For more information about steps to take to update to the newest version, please see the vulnerability information on the Mitsubishi website. To further reduce risk, restrict access to the product only from trusted networks and hosts. Contact a Mitsubishi Electric representative for additional details.
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf - MitigationGT1455-QTBDEcisa_csaf_ot
Mitsubishi Electric recommends users update their products by downloading and applying the latest versions. For more information about steps to take to update to the newest version, please see the vulnerability information on the Mitsubishi website. To further reduce risk, restrict access to the product only from trusted networks and hosts. Contact a Mitsubishi Electric representative for additional details.
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf - MitigationGT1455HS-QTBDEcisa_csaf_ot
Mitsubishi Electric recommends users update their products by downloading and applying the latest versions. For more information about steps to take to update to the newest version, please see the vulnerability information on the Mitsubishi website. To further reduce risk, restrict access to the product only from trusted networks and hosts. Contact a Mitsubishi Electric representative for additional details.
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–7.5
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (12)
Products and version ranges known to be affected.
- Mitsubishi Electric Corporation GT14 Model of GOT 1000 series≤ (GT1455-QTBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QMBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QLBDE CoreOS version ’05.65.00.BD’ and earlier, GT1455HS-QTBDE CoreOS version ’05.65.00.BD’ and earlier, and GT1450HS-QMBDE CoreOS version ’05.65.00.BD’ and earlier)enisa_euvdEU
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-20-310-02Mitsubishi Electric GT14 Model of GOT1000 Series2020-11-05icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities by an attacker may result in a denial-of-service condition or code execution.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (14)
External citations — patches, advisories, analysis.
- https://jvn.jp/vu/JVNVU99562395/index.htmlcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-5646cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-20-310-02cnnvd
- https://www.auscert.org.au/bulletins/ESB-2020.3905/cnnvd
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-014.pdfcnnvd
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdfcnnvd
- https://jvn.jp/vu/JVNVU99562395/index.htmlenisa_euvd
- https://us-cert.cisa.gov/ics/advisories/icsa-20-310-02enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan