CVE-2022-40269
Severity Score
8.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Authentication Bypass by Spoofing vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.14.000 to 01.47.000, Mitsubishi Electric Corporation GOT2000 Series GT25 model versions 01.14.000 to 01.47.000 and Mitsubishi Electric Corporation GT SoftGOT2000 versions 1.265B to 1.285X allows a remote unauthenticated attacker to disclose sensitive information from users' browsers or spoof legitimate users by abusing inappropriate HTML attributes.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-09-08 CVE Reserved
- 2023-02-02 CVE Published
- 2024-08-03 CVE Updated
- 2024-11-06 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-290: Authentication Bypass by Spoofing
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://jvn.jp/vu/JVNVU91222434/index.html | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-021_en.pdf | 2023-02-09 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt27 Firmware Search vendor "Mitsubishielectric" for product "Gt27 Firmware" | >= 01.14.000 < 01.48.000 Search vendor "Mitsubishielectric" for product "Gt27 Firmware" and version " >= 01.14.000 < 01.48.000" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Gt27 Search vendor "Mitsubishielectric" for product "Gt27" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt25 Firmware Search vendor "Mitsubishielectric" for product "Gt25 Firmware" | >= 01.14.000 < 01.48.000 Search vendor "Mitsubishielectric" for product "Gt25 Firmware" and version " >= 01.14.000 < 01.48.000" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Gt25 Search vendor "Mitsubishielectric" for product "Gt25" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Softgot2000 Search vendor "Mitsubishielectric" for product "Gt Softgot2000" | >= 1.265b < 1.290c Search vendor "Mitsubishielectric" for product "Gt Softgot2000" and version " >= 1.265b < 1.290c" | - |
Affected
| ||||||