CVE-2020-17437

🗓️ 11 Dec 2020 22:24:38Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 106 Views

An issue discovered in uIP 1.0, used in Contiki 3.0 & other products. When Urgent flag is set in a TCP packet & stack ignores the data, it can lead to memory pointing beyond the data buffer

Reporter	Title	Published	Views	Family All 75
AstraLinux	Astra Linux - уязвимость в open-iscsi	20 May 202605:53	–	astralinux
Broadcom	AMNESIA:33. (BSA-2020-1167)	9 Dec 202000:00	–	broadcom
Circl	CVE-2020-17437	12 Dec 202002:35	–	circl
CNNVD	Multiple Embedded TCP/IP 缓冲区错误漏洞	8 Dec 202000:00	–	cnnvd
CNVD	Contiki Buffer Overflow Vulnerability	18 Dec 202000:00	–	cnvd
Cvelist	CVE-2020-17437	11 Dec 202022:24	–	cvelist
Debian CVE	CVE-2020-17437	11 Dec 202022:24	–	debiancve
Tenable Nessus	EulerOS 2.0 SP9 : open-iscsi (EulerOS-SA-2021-1012)	4 Jan 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : open-iscsi (EulerOS-SA-2021-1031)	4 Jan 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : iscsi-initiator-utils (EulerOS-SA-2021-1076)	20 Jan 202100:00	–	nessus

NVD

Node

uip_project uipRange≤1.0

AND

contiki-os contikiRange≤3.0

Node

open-iscsi_project open-iscsiRange≤2.1.7

Node

siemens sentron_3va_com100_firmwareRange<4.4.1

AND

siemens sentron_3va_com100Match-

Node

siemens sentron_3va_com800_firmwareRange<4.4.1

AND

siemens sentron_3va_com800Match-

Node

siemens sentron_3va_dsp800_firmwareRange<4.0

AND

siemens sentron_3va_dsp800Match-

Node

siemens sentron_pac2200_clp_firmwareMatch-

AND

siemens sentron_pac2200_clpMatch-

Node

siemens sentron_pac2200_firmwareRange<3.2.2

AND

siemens sentron_pac2200Match-

Node

siemens sentron_pac3200_firmwareRange<2.4.7

AND

siemens sentron_pac3200Match-

Node

siemens sentron_pac3200t_firmwareRange<3.2.2

AND

siemens sentron_pac3200tMatch-

Node

siemens sentron_pac3220_firmwareRange<3.2.0

AND

siemens sentron_pac3220Match-

Node

siemens sentron_pac4200_firmwareRange<2.3.0

AND

siemens sentron_pac4200Match-

Source	Link
kb	www.kb.cert.org/vuls/id/815128
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-541018.pdf
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-20-343-01

21 Nov 2024 05:08Current

7.9High risk

Vulners AI Score7.9

CVSS 26.4

CVSS 3.18.2

EPSS0.00261

CWE-787