CVE-2020-5647

Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version ’05.65.00.BD’…

published November 6, 2020

CVSS
—
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

⚠️ A remote attacker can shut down network functions with just a specially crafted packet! 🎯 Think of it like a prankster sneaking into a control room and flipping the off switch on all the machinery — a small action with huge consequences! If exploited, an attacker could bring your network functions to a standstill or even execute malicious programs. This could lead to downtime, loss of control, and potential damage to your systems, which is absolutely devastating!

Put simply

Think of it like a prankster sneaking into a control room and flipping the off switch on all the machinery — a small action with huge consequences! This vulnerability stems from improper access control in the TCP/IP function of the firmware used in several GT14 model devices. An unauthenticated attacker can send specific packets that disrupt network operations or run harmful code.

What to do

If exploited, an attacker could bring your network functions to a standstill or even execute malicious programs. This could lead to downtime, loss of control, and potential damage to your systems, which is absolutely devastating! To mitigate this risk, update the firmware to version ‘05.65.01.BD’ or later for all affected models. Regularly monitor your devices and ensure only authorized personnel can access sensitive functions. You've got this! With the right steps, you'll secure your systems and have everything running smoothly again. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04206 · 90.9th percentile
Published
2020-11-06T02:06Z
EPSS history
Timeline
  • 06 NOV 02:06Z
    Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version ’05.65.00.BD’…
    cvelistv5