Mitsubishielectric Coreos vulnerabilities

12 CVEs affecting Mitsubishielectric Coreos, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-5649, published 2020-11-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-5644, published 2020-11-06. Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days. Buffer overflow vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version…
CVE-2020-5647, published 2020-11-06. Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days. Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QMBDE CoreOS version…
CVE-2020-5646, published 2020-11-06. High severity, CVSS 7.5. EPSS: 4.2% chance of exploitation in the next 30 days. NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS…
CVE-2020-5649, published 2020-11-06. High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days. Resource management error vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS…
CVE-2020-5645, published 2020-11-06. High severity, CVSS 7.5. EPSS: 3.9% chance of exploitation in the next 30 days. Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version…
CVE-2020-5599, published 2020-07-07. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains an improper…
CVE-2020-5648, published 2020-11-06. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS…
CVE-2020-5595, published 2020-07-07. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains a buffer overflow…
CVE-2020-5597, published 2020-07-07. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains a null pointer…
CVE-2020-5600, published 2020-07-07. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains a resource management…

Latest

CVE-2020-5598, published 2020-07-07. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains an improper access…