CVE-2022-40268

—

CVSS 3.1

4.7 medium

EPSS

<1%p39

Published

Feb 2, 2023 (Feb 2, 2023)

Modified

Jun 17, 2026

Description

Improper Restriction of Rendered UI Layers or Frames vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.14.000 to 01.47.000, Mitsubishi Electric Corporation GOT2000 Series GT25 model versions 01.14.000 to 01.47.000 and Mitsubishi Electric Corporation GT SoftGOT2000 versions 1.265B to 1.285X allows a remote unauthenticated attacker to lead legitimate users to perform unintended operations through clickjacking.

Vendors: mitsubishielectric
Products: gt softgot2000, gt27 firmware, gt25 firmware
Weakness: CWE-1021
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.