CVE-2020-5645

Severity Score

7.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier, GT1455HS-QTBDE CoreOS version "05.65.00.BD" and earlier, and GT1450HS-QMBDE CoreOS version "05.65.00.BD" and earlier) allows a remote unauthenticated attacker to stop the network functions of the products via a specially crafted packet.

Vulnerabilidad de fijación de sesión en la función TCP/IP incluida en el firmware del modelo GT14 de la serie GOT 1000 (GT1455-QTBDE CoreOS versión '05 .65.00.BD' y anteriores, GT1450-QMBDE CoreOS versión '05 .65.00.BD' y anteriores, GT1450-QLBDE CoreOS versión '05 .65.00.BD' y anteriores, GT1455HS-QTBDE CoreOS versión '05 .65.00.BD' y anteriores, y GT1450HS-QMBDE CoreOS versión '05 .65.00.BD' y anteriores), permite a un atacante no autenticado remoto detener las funciones de red de los productos por medio de un paquete especialmente diseñado

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2020-01-06 CVE Reserved
2020-11-06 CVE Published
2024-08-04 CVE Updated
2024-08-26 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-384: Session Fixation

CAPEC

References (4)

URL	Tag	Source
https://jvn.jp/vu/JVNVU99562395/index.html	Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-310-02	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-014.pdf	2020-11-20
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf	2020-11-20

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Mitsubishielectric Search vendor "Mitsubishielectric"	Coreos Search vendor "Mitsubishielectric" for product "Coreos"	<= 05.65.00.bd Search vendor "Mitsubishielectric" for product "Coreos" and version " <= 05.65.00.bd"	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Gt1450-qlbde Search vendor "Mitsubishielectric" for product "Gt1450-qlbde"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Coreos Search vendor "Mitsubishielectric" for product "Coreos"	<= 05.65.00.bd Search vendor "Mitsubishielectric" for product "Coreos" and version " <= 05.65.00.bd"	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Gt1450-qmbde Search vendor "Mitsubishielectric" for product "Gt1450-qmbde"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Coreos Search vendor "Mitsubishielectric" for product "Coreos"	<= 05.65.00.bd Search vendor "Mitsubishielectric" for product "Coreos" and version " <= 05.65.00.bd"	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Gt1450hs-qmbde Search vendor "Mitsubishielectric" for product "Gt1450hs-qmbde"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Coreos Search vendor "Mitsubishielectric" for product "Coreos"	<= 05.65.00.bd Search vendor "Mitsubishielectric" for product "Coreos" and version " <= 05.65.00.bd"	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Gt1455-qtbde Search vendor "Mitsubishielectric" for product "Gt1455-qtbde"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Coreos Search vendor "Mitsubishielectric" for product "Coreos"	<= 05.65.00.bd Search vendor "Mitsubishielectric" for product "Coreos" and version " <= 05.65.00.bd"	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Gt1455hs-qtbde Search vendor "Mitsubishielectric" for product "Gt1455hs-qtbde"	-	-	Safe