CVE-2023-3373 is a critical vulnerability affecting Mitsubishi Electric GOT2000 Series GT21 and GOT SIMPLE Series GS21 models prior to version 01.49.000. This flaw allows a remote, unauthenticated attacker to guess the listening port of an FTP server's data connection due to predictable values. With a CVSS score of 9.1 (CRITICAL), successful exploitation can lead to session hijacking, enabling data connection manipulation, or a denial-of-service condition by preventing legitimate users from connecting. Currently, there is no evidence of active exploitation, nor is public exploit code or significant community discussion available.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 01.50.000CPE matchmatch criteria | cpe:2.3:o:mitsubishielectric:gt21_firmware:*:*:*:*:*:*:*:* | ||
< 01.50.000CPE matchmatch criteria | cpe:2.3:o:mitsubishielectric:gs21_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.