Files
vuln-nvd/data/2021/CVE-2021-20590.json
T

2 lines
6.9 KiB
JSON

{"affected":[{"affectedData":[{"product":"GOT2000 series GT27 model","vendor":"n/a","versions":[{"status":"affected","version":"VNC server version 01.39.010 and prior"}]},{"product":"GOT2000 series GT25 model","vendor":"n/a","versions":[{"status":"affected","version":"VNC server version 01.39.010 and prior"}]},{"product":"GOT2000 series GT21 model GT2107-WTBD","vendor":"n/a","versions":[{"status":"affected","version":"VNC server version 01.40.000 and prior"}]},{"product":"GOT2000 series GT21 model GT2107-WTSD","vendor":"n/a","versions":[{"status":"affected","version":"VNC server version 01.40.000 and prior"}]},{"product":"GOT SIMPLE series GS21 model GS2110-WTBD-N","vendor":"n/a","versions":[{"status":"affected","version":"VNC server version 01.40.000 and prior"}]},{"product":"GOT SIMPLE series GS21 model GS2107-WTBD-N","vendor":"n/a","versions":[{"status":"affected","version":"VNC server version 01.40.000 and prior"}]}],"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:got2000_gt27_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"22A5B6C7-8B78-4129-B86E-B7CF89F516C6","versionEndIncluding":"01.39.010","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:got2000_gt27:-:*:*:*:*:*:*:*","matchCriteriaId":"498350D7-F7D7-478E-AD3A-3FE100434649","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:got2000_gt25_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F7E4DB38-4E11-45AD-AD7D-83A4176AF2AC","versionEndIncluding":"01.39.010","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:got2000_gt25:-:*:*:*:*:*:*:*","matchCriteriaId":"ED2A8FF7-2CFA-4604-A6DE-AE05F7BF1838","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:gt2107-wtbd_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"ADEB8E65-0B88-4E32-BF2C-0A48DBE69A29","versionEndIncluding":"01.40.000","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:gt2107-wtbd:-:*:*:*:*:*:*:*","matchCriteriaId":"6D8D058D-DDFB-45D4-BF67-52F47CA0634C","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:gt2107-wtsd_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"9D35B387-13E1-4A4B-85FE-1859328A2C1F","versionEndIncluding":"01.40.000","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:gt2107-wtsd:-:*:*:*:*:*:*:*","matchCriteriaId":"C6A4460D-F108-4DAE-AB65-1083C140F63C","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:gs2110-wtbd-n_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"1653C34C-63FD-4415-A3DE-31209CBBF934","versionEndIncluding":"01.40.000","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:gs2110-wtbd-n:-:*:*:*:*:*:*:*","matchCriteriaId":"BCA7AF60-7B6A-4ED7-AA1B-40C5097E4EE4","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mitsubishielectric:gs2107-wtbd-n_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5F2961DA-1947-4DC7-9A8B-05E8588BA2A6","versionEndIncluding":"01.40.000","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mitsubishielectric:gs2107-wtbd-n:-:*:*:*:*:*:*:*","matchCriteriaId":"63EA140E-C23D-41FF-B4EF-686C2D42BD22","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server versions 01.39.010 and prior, GOT2000 series GT21 model GT2107-WTBD VNC server versions 01.40.000 and prior, GOT2000 series GT21 model GT2107-WTSD VNC server versions 01.40.000 and prior, GOT SIMPLE series GS21 model GS2110-WTBD-N VNC server versions 01.40.000 and prior and GOT SIMPLE series GS21 model GS2107-WTBD-N VNC server versions 01.40.000 and prior allows a remote unauthenticated attacker to gain unauthorized access via specially crafted packets when the \"VNC server\" function is used."},{"lang":"es","value":"Vulnerabilidad de autenticación inadecuada en el servidor VNC de la serie GOT2000 modelo GT27 versiones 01.39.010 y anteriores, servidor VNC de la serie GOT2000 modelo GT25 versiones 01.39.010 y anteriores, servidor VNC de la serie GOT2000 modelo GT2107-WTBD versiones 01.40.000 y anteriores, servidor VNC de la serie GOT2000 modelo GT2107-WTSD versiones 01.40. 000 y anteriores, el servidor VNC de la serie GOT SIMPLE GS21 modelo GS2110-WTBD-N versiones 01.40.000 y anteriores y el servidor VNC de la serie GOT SIMPLE GS21 modelo GS2107-WTBD-N versiones 01.40.000 y anteriores permite a un atacante remoto no autenticado obtener acceso no autorizado a través de paquetes especialmente diseñados cuando se utiliza la función \"servidor VNC\"."}],"id":"CVE-2021-20590","lastModified":"2026-06-17T03:34:04.550","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":4.3,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-04-22T19:15:07.363","references":[{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","url":"https://jvn.jp/vu/JVNVU97615777/index.html"},{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-001_en.pdf"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://jvn.jp/vu/JVNVU97615777/index.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-001_en.pdf"}],"sourceIdentifier":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-287"}],"source":"nvd@nist.gov","type":"Primary"}]}