CVE-2022-40266CWE-20

Denial-of-Service (DoS) Vulnerability in FTP Server Function on GOT2000 Series

Medium · published November 24, 2022

CVSS v3.1
5.3
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

Improper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 01.39.000 and prior, Mitsubishi Electric GOT2000 Series GT25 model FTP server versions 01.39.000 and prior and Mitsubishi Electric GOT2000 Series GT23 model FTP server versions 01.39.000 and prior allows a remote authenticated attacker to cause a Denial of Service condition by sending specially crafted command.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00876 · 58.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-11-24T08:20Z
EPSS history
Timeline
  • 24 NOV 08:20Z
    Denial-of-Service (DoS) Vulnerability in FTP Server Function on GOT2000 Series
    cvelistv5