CVE-2020-5645 Auth bypass in GT14 Model of GOT 1000 series

High 7.5 Published 6 Nov 2020 Updated 4 Aug 2024

Remote unauthenticated attackers can stop network functions on Mitsubishi GOT 1000 series HMIs via crafted packets, requiring firmware updates.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-5645?

CVE-2020-5645 is a high-severity authentication bypass vulnerability in Mitsubishi Electric Corporation GT14 Model of GOT 1000 series, published on 6 Nov 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier, GT1455HS-QTBDE CoreOS version "05.65.00.BD" and earlier, and GT1450HS-QMBDE CoreOS version "05.65.00.BD" and earlier) allows a remote unauthenticated attacker to stop the network functions of the products via a specially crafted packet.

Weakness: CWE-384

Which versions are affected by CVE-2020-5645?

It affects 1 product.

Products include Mitsubishielectric Coreos.

How do I fix CVE-2020-5645?

No fix has been published for CVE-2020-5645 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2020-5645 being exploited?

There is no known exploitation of CVE-2020-5645 in the wild and no public exploit code.

Sources

Also known as GHSA-424f-mqpf-66f3.