CVE-2020-5645

Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier, GT1455HS-QTBDE CoreOS version "05.65.00.BD" and earlier, and GT1450HS-QMBDE CoreOS version "05.65.00.BD" and earlier) allows a remote unauthenticated attacker to stop the network functions of the products via a specially crafted packet.

• CWE-384

• https://jvn.jp/vu/JVNVU99562395/index.htmlThird Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-310-02Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-014.pdfVendor Advisory
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdfVendor Advisory
• https://jvn.jp/vu/JVNVU99562395/index.htmlThird Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-310-02Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-014.pdfVendor Advisory
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdfVendor Advisory

Published

Nov 6, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5639Directory traversal vulnerability in FileZen versions from V…9.8
• CVE-2020-5640Local file inclusion vulnerability in OneThird CMS v1.96c an…9.8
• CVE-2020-5641Cross-site request forgery (CSRF) vulnerability in GS108Ev3 …6.5
• CVE-2020-5642Cross-site request forgery (CSRF) vulnerability in Live Chat…8.8
• CVE-2020-5643Improper input validation vulnerability in Cybozu Garoon 5.0…6.5
• CVE-2020-5644Buffer overflow vulnerability in TCP/IP function included in…9.8
• CVE-2020-5646NULL pointer dereferences vulnerability in TCP/IP function i…7.5
• CVE-2020-5647Improper access control vulnerability in TCP/IP function inc…9.8
• CVE-2020-5648Improper neutralization of argument delimiters in a command …9.8
• CVE-2020-5649Resource management error vulnerability in TCP/IP function i…7.5
• CVE-2020-5650Cross-site scripting vulnerability in Simple Download Monito…6.1
• CVE-2020-5651SQL injection vulnerability in Simple Download Monitor 3.8.8…8.8