CVE-2021-20589

HIGH

Mitsubishi GOT2000 and GOT SIMPLE Series Firmware - Denial of Service via Crafted MODBUS/TCP Packets

Title source: llm
STIX 2.1

Description

Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.38.000, GT25 model communication driver versions 01.19.000 through 01.38.000, GT23 model communication driver versions 01.19.000 through 01.38.000 and GT21 model communication driver versions 01.21.000 through 01.39.000, GOT SIMPLE series GS21 model communication driver versions 01.21.000 through 01.39.000, GT SoftGOT2000 versions 1.170C through 1.250L and Tension Controller LE7-40GU-L Screen package data for MODBUS/TCP V1.00 allows a remote unauthenticated attacker to stop the communication function of the products via specially crafted packets.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://jvn.jp/vu/JVNVU99895108/index.html

Scores

CVSS v3 7.5
EPSS 0.0148
EPSS Percentile 70.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-119
Status published
Products (6)
mitsubishi/gs21_firmware 01.21.000 - 01.39.000
mitsubishi/gt21_firmware 01.21.000 - 01.39.000
mitsubishi/gt23_firmware 01.19.000 - 01.38.000
mitsubishi/gt25_firmware 01.19.000 - 01.38.000
mitsubishi/gt27_firmware 01.19.000 - 01.38.000
mitsubishi/gt_softgot2000_firmware 1.170c - 1.250l
Published May 19, 2021
Tracked Since Feb 18, 2026