CVE-2020-5599

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and…

published July 7, 2020

CVSS
—
EPSS
3%
Percentile
89.1
In the wild
Unconfirmed
What it is

⚠️ An improperly handled command in Mitsubishi Electric's GOT2000 series could let a remote attacker collapse network functions with just one cleverly crafted packet! Think of this like a misdelivered pizza order that confuses the chef into making their worst dish — all it takes is the right (or wrong) instructions to throw everything off track! If exploited, an attacker could halt network operations or even run malevolent software, wreaking havoc on your devices. Imagine an out-of-control kitchen where chaos reigns, and you have no idea how to regain control!

Put simply

Think of this like a misdelivered pizza order that confuses the chef into making their worst dish — all it takes is the right (or wrong) instructions to throw everything off track! This vulnerability arises from the improper neutralization of argument delimiters within the TCP/IP function of Mitsubishi Electric's firmware, allowing attackers to manipulate commands via specially crafted packets.

What to do

If exploited, an attacker could halt network operations or even run malevolent software, wreaking havoc on your devices. Imagine an out-of-control kitchen where chaos reigns, and you have no idea how to regain control! To mitigate this issue, ensure that you update the firmware on your GT27, GT25, and GT23 models to the latest version. Regularly audit network traffic for anomalies and implement strict access controls to safeguard against unauthorized access. You've got this! With a proactive approach, you'll have your network safe and sound in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03489 · 89.1th percentile
Published
2020-07-07T08:05Z
EPSS history
Timeline
  • 07 JUL 08:05Z
    TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and…
    cvelistv5