CVE-2021-20590: High severity mitsubishi electric got2000 gt27 firmware vulnerability
Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server versions 01.39.010 and prior, GOT2000 series GT21 model GT2107-WTBD VNC server versions 01.40.000 and prior, GOT2000 series GT21 model GT2107-WTSD VNC server versions 01.40.000 and prior, GOT SIMPLE series GS21 model GS2110-WTBD-N VNC server versions 01.40.000 and prior and GOT SIMPLE series GS21 model GS2107-WTBD-N VNC server versions 01.40.000 and prior allows a remote unauthenticated attacker to gain unauthorized access via specially crafted packets when the "VNC server" function is used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-20590?
CVE-2021-20590 has a medium severity rating due to improper authentication that could allow unauthorized access.
How do I fix CVE-2021-20590?
To address CVE-2021-20590, it is recommended to update the firmware of affected GOT2000 series models to the latest version.
Which versions are affected by CVE-2021-20590?
CVE-2021-20590 affects GOT2000 series GT27, GT25, and GT21 models with specific firmware versions 01.39.010 or earlier and 01.40.000 or earlier.
What kind of devices are impacted by CVE-2021-20590?
CVE-2021-20590 impacts Mitsubishi Electric GOT2000 series devices, specifically models GT27, GT25, GT2107-WTBD, and GT2107-WTSD.
Is CVE-2021-20590 easily exploitable?
Yes, CVE-2021-20590 is considered to be easily exploitable due to the improper authentication vulnerability.