Authentication Bypass Vulnerability in Mitsubishi Electric GOT2000 Series Products
CVE-2022-40269
6.8MEDIUM
Key Information:
- Vendor
- CVE Published:
- 2 February 2023
Summary
An authentication bypass vulnerability exists in Mitsubishi Electric Corporation's GOT2000 Series GT27 and GT25 models, as well as in the GT SoftGOT2000. This vulnerability enables remote unauthenticated attackers to exploit improper HTML attributes, potentially disclosing sensitive user information from browsers or impersonating legitimate users. It is crucial for organizations using these products to implement security measures to mitigate potential exploitation.
Affected Version(s)
GOT2000 Series GT25 model 01.14.000 to 01.47.000
GOT2000 Series GT27 model 01.14.000 to 01.47.000
GT SoftGOT2000 1.265B to 1.285X
References
CVSS V3.1
Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved