Authentication Bypass Vulnerability in Mitsubishi Electric GOT2000 Series Products
CVE-2022-40269
6.8MEDIUM
Key Information:
- Vendor
- CVE Published:
- 2 February 2023
What is CVE-2022-40269?
An authentication bypass vulnerability exists in Mitsubishi Electric Corporation's GOT2000 Series GT27 and GT25 models, as well as in the GT SoftGOT2000. This vulnerability enables remote unauthenticated attackers to exploit improper HTML attributes, potentially disclosing sensitive user information from browsers or impersonating legitimate users. It is crucial for organizations using these products to implement security measures to mitigate potential exploitation.
Affected Version(s)
GOT2000 Series GT25 model 01.14.000 to 01.47.000
GOT2000 Series GT27 model 01.14.000 to 01.47.000
GT SoftGOT2000 1.265B to 1.285X