Medium severity5.3NVD Advisory· Published Nov 24, 2022· Updated Jun 17, 2026
CVE-2022-40266
CVE-2022-40266
Description
Improper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 01.39.000 and prior, Mitsubishi Electric GOT2000 Series GT25 model FTP server versions 01.39.000 and prior and Mitsubishi Electric GOT2000 Series GT23 model FTP server versions 01.39.000 and prior allows a remote authenticated attacker to cause a Denial of Service condition by sending specially crafted command.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7- cpe:2.3:o:mitsubishielectric:got2000_gt23_firmware:*:*:*:*:*:*:*:*Range: <=01.39.000
- cpe:2.3:o:mitsubishielectric:got2000_gt25_firmware:*:*:*:*:*:*:*:*Range: <=01.39.000
- cpe:2.3:o:mitsubishielectric:got2000_gt27_firmware:*:*:*:*:*:*:*:*Range: <=01.39.000
- Range: <=01.39.000
- Mitsubishi Electric/GOT2000 Series GT23 modelv5Range: FTP server versions 01.39.000 and prior
- Mitsubishi Electric/GOT2000 Series GT25 modelv5Range: FTP server versions 01.39.000 and prior
- Mitsubishi Electric/GOT2000 Series GT27 modelv5Range: FTP server versions 01.39.000 and prior
Patches
Vulnerability mechanics
References
2- jvn.jp/vu/JVNVU95633416nvdThird Party Advisory
- www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-016_en.pdfnvdMitigationVendor Advisory
News mentions
0No linked articles in our index yet.