CVE-2021-20601
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series...
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.
- Record
CVE-2021-20601- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:C/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.
- Record
CVE-2021-20601- Updated
- 2026-11-02
EUVDEUVD-2021-8019No score
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.
- Record
EUVD-2021-8019- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j5w5-24wj-99v2No score
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series...
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.
- Record
GHSA-j5w5-24wj-99v2- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
- mitsubishielectric gt softgot2000
- mitsubishielectric got2000 gt2103-pmbd firmware
- mitsubishielectric got2000 gt2103-pmbds2 firmware
- mitsubishielectric got2000 gt2103-pmbds firmware
- mitsubishielectric got2000 gt2103-pmbls firmware
- mitsubishielectric got2000 gt2104-rtbd firmware
- mitsubishielectric got2000 gt2107-wtbd firmware
- mitsubishielectric got2000 gt2308-vtba firmware
- mitsubishielectric got2000 gt2308-vtbd firmware
- mitsubishielectric got2000 gt2310-vtba firmware
- mitsubishielectric got2000 gt2310-vtbd firmware
- mitsubishielectric got2000 gt2505-vtbd firmware
Show 38 moreShow less
- mitsubishielectric got2000 gt2505hs-vtbd firmware
- mitsubishielectric got2000 gt2506hs-vtbd firmware
- mitsubishielectric got2000 gt2507-wtbd firmware
- mitsubishielectric got2000 gt2507-wtsd firmware
- mitsubishielectric got2000 gt2507t-wtsd firmware
- mitsubishielectric got2000 gt2508-vtba firmware
- mitsubishielectric got2000 gt2508-vtbd firmware
- mitsubishielectric got2000 gt2508-vtwa firmware
- mitsubishielectric got2000 gt2508-vtwd firmware
- mitsubishielectric got2000 gt2510-vtba firmware
- mitsubishielectric got2000 gt2510-vtbd firmware
- mitsubishielectric got2000 gt2510-vtwa firmware
- mitsubishielectric got2000 gt2510-vtwd firmware
- mitsubishielectric got2000 gt2510-wxtbd firmware
- mitsubishielectric got2000 gt2510-wxtsd firmware
- mitsubishielectric got2000 gt2512-stba firmware
- mitsubishielectric got2000 gt2512-stbd firmware
- mitsubishielectric got2000 gt2512-wxtbd firmware
- mitsubishielectric got2000 gt2512-wxtsd firmware
- mitsubishielectric got2000 gt2705-vtbd firmware
- mitsubishielectric got2000 gt2708-stba firmware
- mitsubishielectric got2000 gt2708-stbd firmware
- mitsubishielectric got2000 gt2708-vtba firmware
- mitsubishielectric got2000 gt2708-vtbd firmware
- mitsubishielectric got2000 gt2710-stba firmware
- mitsubishielectric got2000 gt2710-stbd firmware
- mitsubishielectric got2000 gt2710-vtba firmware
- mitsubishielectric got2000 gt2710-vtbd firmware
- mitsubishielectric got2000 gt2710-vtwa firmware
- mitsubishielectric got2000 gt2710-vtwd firmware
- mitsubishielectric got2000 gt2712-stba firmware
- mitsubishielectric got2000 gt2712-stbd firmware
- mitsubishielectric got2000 gt2712-stwa firmware
- mitsubishielectric got2000 gt2712-stwd firmware
- mitsubishielectric got2000 gt2715-xtba firmware
- mitsubishielectric got2000 gt2715-xtbd firmware
- mitsubishielectric got simple gs2107-wtbd firmware
- mitsubishielectric got simple gs2110-wtbd firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-20601 is a high vulnerability (CVSS 7.5) in Mitsubishielectric Gt Softgot2000, published November 23, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.43%, the 84th percentile. No source names a fixed version.