CVE-2023-3373CWE-342

Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT21 model versions 01.49.000 and prior and GOT…

Medium · published August 3, 2023

CVSS v3.1
5.9
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT21 model versions 01.49.000 and prior and GOT SIMPLE Series GS21 model versions 01.49.000 and prior allows a remote unauthenticated attacker to hijack data connections (session hijacking) or prevent legitimate users from establishing data connections (to cause DoS condition) by guessing the listening port of the data connection on FTP server and connecting to it.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.01016 · 61.0th percentile
Weakness
CWE-342 · Predictable Exact Value from Previous Values
Published
2023-08-03T23:44Z
EPSS history
Timeline
  • 03 AUG 23:44Z
    Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT21 model versions 01.49.000 and prior and GOT…
    cvelistv5