PT-2020-18615 · Mitsubishi · Got 1000 Series

Published 2020-11-06 · Updated 2020-11-20 · CVE-2020-5648

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GOT 1000 series GT1455-QTBDE CoreOS versions 05.65.00.BD and earlier GOT 1000 series GT1450-QMBDE CoreOS versions 05.65.00.BD and earlier GOT 1000 series GT1450-QLBDE CoreOS versions 05.65.00.BD and earlier GOT 1000 series GT1455HS-QTBDE CoreOS versions 05.65.00.BD and earlier GOT 1000 series GT1450HS-QMBDE CoreOS versions 05.65.00.BD and earlier

Description The issue is related to improper neutralization of argument delimiters in a command, also known as 'Argument Injection', in the TCP/IP function included in the firmware of the GT14 Model of GOT 1000 series. This allows unauthenticated attackers on an adjacent network to stop the network functions of the products via a specially crafted packet.

Recommendations For GOT 1000 series GT1455-QTBDE CoreOS versions 05.65.00.BD and earlier, update to a version later than 05.65.00.BD. For GOT 1000 series GT1450-QMBDE CoreOS versions 05.65.00.BD and earlier, update to a version later than 05.65.00.BD. For GOT 1000 series GT1450-QLBDE CoreOS versions 05.65.00.BD and earlier, update to a version later than 05.65.00.BD. For GOT 1000 series GT1455HS-QTBDE CoreOS versions 05.65.00.BD and earlier, update to a version later than 05.65.00.BD. For GOT 1000 series GT1450HS-QMBDE CoreOS versions 05.65.00.BD and earlier, update to a version later than 05.65.00.BD. As a temporary workaround, consider restricting access to the TCP/IP function to minimize the risk of exploitation.

Fix

Argument Injection

Weakness Enumeration

CWE-88

Related Identifiers

CVE-2020-5648

Affected Products

Got 1000 Series

References · 9

• https://mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-014.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5648 · Vendor Advisory
• https://mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5648 · Security Note
• https://t.me/cibsecurity/15954 · Telegram Post
• https://t.me/cvenotify/5920 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsa-20-310-02 · Note
• https://t.me/cvenotify/5468 · Telegram Post
• https://jvn.jp/vu/JVNVU99562395/index.html · Note