Clickjacking Vulnerability in Mitsubishi Electric GOT2000 Series and GT SoftGOT2000

CVE-2022-40268

Summary

A vulnerability exists in Mitsubishi Electric Corporation's GOT2000 Series GT27 and GT25 models, along with GT SoftGOT2000, which enables a remote unauthenticated attacker to exploit clickjacking techniques. This flaw could manipulate legitimate users into executing unintended operations without their knowledge. By taking advantage of the improper restriction of rendered UI layers or frames, attackers can lead users to interact with deceptive interfaces, thus compromising the integrity of operations carried out on these devices.

References