CVE-2022-40266

Improper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 01.39.000 and prior, Mitsubishi Electric GOT2000 Series GT25 model FTP server versions 01.39.000 and prior and Mitsubishi Electric GOT2000 Series GT23 model FTP server versions 01.39.000 and prior allows a remote authenticated attacker to cause a Denial of Service condition by sending specially crafted command.

• CWE-20
• CWE-20

• https://jvn.jp/vu/JVNVU95633416Third Party Advisory
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-016_en.pdfMitigation, Vendor Advisory
• https://jvn.jp/vu/JVNVU95633416Third Party Advisory
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-016_en.pdfMitigation, Vendor Advisory

Published

Nov 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-40259MegaRAC Default Credentials Vulnerability9.8
• CVE-2022-40261An attacker can exploit this vulnerability to elevate privil…8.2
• CVE-2022-40262A potential attacker can execute an arbitrary code at the ti…8.2
• CVE-2022-40263BD Totalys MultiProcessor, versions 1.70 and earlier, contai…7.8
• CVE-2022-40264Improper Limitation of a Pathname to a Restricted Directory …7.1
• CVE-2022-40265Improper Input Validation vulnerability in Mitsubishi Electr…7.5
• CVE-2022-40267Predictable Seed in Pseudo-Random Number Generator (PRNG) vu…9.1
• CVE-2022-40268Improper Restriction of Rendered UI Layers or Frames vulnera…4.7
• CVE-2022-40269Authentication Bypass by Spoofing vulnerability in Mitsubish…8.1
• CVE-2022-4027The Simple:Press plugin for WordPress is vulnerable to Store…5.4
• CVE-2022-40270Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-40271Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…