CVE-2023-3373

Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT21 model versions 01.49.000 and prior and GOT SIMPLE Series GS21 model versions 01.49.000 and prior allows a remote unauthenticated attacker to hijack data connections (session hijacking) or prevent legitimate users from establishing data connections (to cause DoS condition) by guessing the listening port of the data connection on FTP server and connecting to it.

• CWE-342
• CWE-330

• https://jvn.jp/vu/JVNVU92167394/index.htmlThird Party Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-215-01Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-006_en.pdfVendor Advisory
• https://jvn.jp/vu/JVNVU92167394/index.htmlThird Party Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-215-01Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-006_en.pdfVendor Advisory

Published

Aug 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-33718mp4v2 v2.1.3 was discovered to contain a memory leak via MP4…8.8
• CVE-2023-33719mp4v2 v2.1.3 was discovered to contain a memory leak via MP4…5.5
• CVE-2023-3372The Lana Shortcodes WordPress plugin before 1.2.0 does not v…5.4
• CVE-2023-33720mp4v2 v2.1.2 was discovered to contain a memory leak via the…6.5
• CVE-2023-33722EDIMAX BR-6288ACL v1.12 was discovered to contain an authent…8.8
• CVE-2023-33725Broadleaf 5.x and 6.x (including 5.2.25-GA and 6.2.6-GA) was…6.1
• CVE-2023-33730Privilege Escalation in the "GetUserCurrentPwd" function in …9.8
• CVE-2023-33731Reflected Cross Site Scripting (XSS) in the view dashboard d…6.1
• CVE-2023-33732Cross Site Scripting (XSS) in the New Policy form in Microwo…6.1
• CVE-2023-33733Reportlab up to v3.6.12 allows attackers to execute arbitrar…7.8
• CVE-2023-33734BlueCMS v1.6 was discovered to contain a SQL injection vulne…9.8
• CVE-2023-33735D-Link DIR-846 v1.00A52 was discovered to contain a remote c…9.8