Out-of-bounds Read Vulnerability in Mitsubishi Electric GOT2000 and GS21 Series
CVE-2020-5675

7.5HIGH

Key Information:

Vendor: Mitsubishi Electric Corporation
Status: Gt21 Model Of Got2000 Series, Gs21 Model Of Got Simple Series, And Tension Controller Le7-40gu-l Series
Vendor: CVE Published:; 4 December 2020

Summary

An out-of-bounds read vulnerability exists in the GT21 model of the GOT2000 series, GS21 model of the GOT series, and Tension Controller LE7-40GU-L series. This flaw allows a remote attacker to trigger a denial-of-service condition by sending specially crafted packets. The affected products may suffer from degraded communication performance or complete denial of service in their TCP communication functions, leading to potential disruptions in their operational capabilities.

Affected Version(s)

GT21 model of GOT2000 series, GS21 model of GOT SIMPLE series, and Tension Controller LE7-40GU-L series GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, GT2104-RTBD V01.39.000 and earlier, GT2104-PMBD V01.39.000 and earlier, and GT2103-PMBD V01.39.000 and earlier), GS21 model of GOT series (GS2110-WTBD V01.39.000 and earlier, GS2107-WTBD V01.39.000 and earlier, GS2110-WTBD-N V01.39.000 and earlier, and GS2107-WTBD-N V01.39.000 and earlier), and Tension Controller LE7-40GU-L series (LE7-40GU-L Screen package data for CC-Link IEF Basic V1.00, LE7-40GU-L Screen package data for MODBUS/TCP V1.00, and LE7-40GU-L Screen package data for SLMP V1.00)