CVE-2020-5595

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and…

published July 7, 2020

CVSS
—
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

⚠️ A rogue packet could bring your Mitsubishi Electric GOT2000 series devices to their knees! This buffer overflow vulnerability could allow attackers to disrupt network functions with surprising ease. 🔥 Think of it like a traffic light that gets stuck on red because someone sent a confusing signal. Instead of guiding traffic smoothly, it brings everything to a halt, creating chaos on the network! If an attacker sends a specially crafted packet, they could stop all network functions, leaving your devices unresponsive. In the worst case, they might execute malicious programs, leading to severe downtime or integrity issues for your operations. Yikes!

Put simply

Think of it like a traffic light that gets stuck on red because someone sent a confusing signal. Instead of guiding traffic smoothly, it brings everything to a halt, creating chaos on the network! The vulnerability resides in the TCP/IP function of the firmware for Mitsubishi Electric's GOT2000 series, specifically in CoreOS versions -Y and earlier. This flaw allows a buffer overflow, which can be exploited by sending crafted TCP packets.

What to do

If an attacker sends a specially crafted packet, they could stop all network functions, leaving your devices unresponsive. In the worst case, they might execute malicious programs, leading to severe downtime or integrity issues for your operations. Yikes! To protect your devices, immediately check your firmware version and upgrade to the latest available release that addresses this vulnerability. Additionally, implement network monitoring to detect any unusual traffic patterns that might indicate an attempted exploit. You've got this! Stay proactive, patch your systems, and you've got a great handle on your security! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02452 · 84.3th percentile
Published
2020-07-07T08:05Z
EPSS history
Timeline
  • 07 JUL 08:05Z
    TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and…
    cvelistv5