Lucene search

MitsubishiCVELIST:CVE-2022-40266

HistoryNov 24, 2022 - 8:20 a.m.

CVE-2022-40266 Denial-of-Service (DoS) Vulnerability in FTP Server Function on GOT2000 Series

2022-11-2408:20:14

CWE-20

Mitsubishi

www.cve.org

cve-2022-40266

denial-of-service

ftp server

got2000 series

improper input validation

mitsubishi electric

gt27 model

gt25 model

gt23 model

remote authenticated attacker

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.002

Percentile

51.9%

JSON

Improper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 01.39.000 and prior, Mitsubishi Electric GOT2000 Series GT25 model FTP server versions 01.39.000 and prior and Mitsubishi Electric GOT2000 Series GT23 model FTP server versions 01.39.000 and prior allows a remote authenticated attacker to cause a Denial of Service condition by sending specially crafted command.

CNA Affected

[
  {
    "product": "GOT2000 Series GT27 model",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "FTP server versions 01.39.000 and prior"
      }
    ]
  },
  {
    "product": "GOT2000 Series GT25 model",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "FTP server versions 01.39.000 and prior"
      }
    ]
  },
  {
    "product": "GOT2000 Series GT23 model",
    "vendor": "Mitsubishi Electric",
    "versions": [
      {
        "status": "affected",
        "version": "FTP server versions 01.39.000 and prior"
      }
    ]
  }
]

References

jvn.jp/vu/JVNVU95633416

www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-016_en.pdf

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.002

Percentile

51.9%

JSON

Related for CVELIST:CVE-2022-40266