Skip to content
Fencer Vulns
high 7.5

CVE-2020-5675 json

Out-of-bounds read vulnerability in GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, G…

published 2020-12-04 5 y ago modified 2026-06-17 4 mo ago also EUVD-2020-26836

cvss
7.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
2.8%
EPSS 2.8% chance of exploitation in 30 days, percentile 86%
public exploits
0
none known

Summary

Out-of-bounds read vulnerability in GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, GT2104-RTBD V01.39.000 and earlier, GT2104-PMBD V01.39.000 and earlier, and GT2103-PMBD V01.39.000 and earlier), GS21 model of GOT series (GS2110-WTBD V01.39.000 and earlier, GS2107-WTBD V01.39.000 and earlier, GS2110-WTBD-N V01.39.000 and earlier, and GS2107-WTBD-N V01.39.000 and earlier), and Tension Controller LE7-40GU-L series (LE7-40GU-L Screen package data for CC-Link IEF Basic V1.00, LE7-40GU-L Screen package data for MODBUS/TCP V1.00, and LE7-40GU-L Screen package data for SLMP V1.00) allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted packet. As a result, deterioration of communication performance or a denial-of-service (DoS) condition of the TCP communication functions of the products may occur.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-20-343-02 updated cvss 7.5

Mitsubishi Electric GOT and Tension Controller (Update B)

  • Mitsubishi Electric GS2107-WTBD <= 01.39.000 Mitsubishi Electric GS2107-WTBD-N <= 01.39.000 Mitsubishi Electric GS2110-WTBD <= 01.39.000 Mitsubishi Electric GS2110-WTBD-N <= 01.39.000 Mitsubishi Electric GT2103-PMBD <= 01.39.000 Mitsubishi Electric GT2104-PMBD <= 01.39.000
    +6 more products
    Mitsubishi Electric GT2104-RTBD <= 01.39.000 Mitsubishi Electric GT2107-WTBD <= 01.39.000 Mitsubishi Electric GT2107-WTSD <= 01.39.000 Mitsubishi Electric LE7-40GU-L Screen package data for CC-Link IEF Basic 1 Mitsubishi Electric LE7-40GU-L Screen package data for MODBUS/TCP 1 Mitsubishi Electric LE7-40GU-L Screen package data for SLMP 1
    affected: mitigation “Mitsubishi Electric has fixed the basic system application for GOT2000 series GT21 model or GOT SIMPLE series GS21 model, which is shipped with GT Designer3 (2000) versions 1.255R or later.” mitsubishielectric.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

2.82% chance of exploitation in the next 30 days, higher than 86% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

  • Mitsubishi Electric Corporation GT21 model of GOT2000 series, GS21 model of GOT SIMPLE series, and Tension Controller LE7-40GU-L series

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.