CVE:CVE-2021-20589
CNNVD:CNNVD-202105-627
Mitsubishi Electric GT27等都是日本三菱电机（Mitsubishi Electric）公司的一款GOT2000系列图形操作终端。
多款Mitsubishi Electric设备存在缓冲区错误漏洞。攻击者可能利用此漏洞导致设备拒绝服务。以下产品及版本受到影响：GT27 model: Versions 01.19.000 - 01.38.000GT25 model: Versions 01.19.000 - 01.38.000、GT23 model: Versions 01.19.000 - 01.38.000、GT21 model: Versions 01.21.000 - 01.39.000、GS21 model: Versions 01.21.000 - 01.39.000、GT SoftGOT2000: Versions 1.170C - 1.250L、LE7-40GU-L: Screen package data for MODBUS/TCP v1.00。
solution:Upgrade mitsubishi gt27_firmware to a higher version than 01.38.000,and avoid the version [01.19.000,01.38.000]; Upgrade mitsubishi gt25_firmware to a higher version than 01.38.000,and avoid the version [01.19.000,01.38.000]; Upgrade mitsubishi gt23_firmware to a higher version than 01.38.000,and avoid the version [01.19.000,01.38.000]; Upgrade mitsubishi gt21_firmware to a higher version than 01.39.000,and avoid the version [01.21.000,01.39.000]; Upgrade mitsubishi gs21_firmware to a higher version than 01.39.000,and avoid the version [01.21.000,01.39.000]; Upgrade mitsubishi gt_softgot2000_firmware to a higher version than 1.250l,and avoid the version [1.170c,1.250l]