CVE-2020-25195

🗓️ 15 Dec 2020 19:38:02Reported by icscertType

The input field length verification on Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules is only done on the client side, potentially enabling an attacker to bypass the check and crash the device

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2020-25195	15 Dec 202022:40	–	circl
CNNVD	Host Engineering Ecom100 Module Input Validation Error Vulnerability	10 Dec 202000:00	–	cnnvd
Cvelist	CVE-2020-25195	15 Dec 202019:38	–	cvelist
EUVD	EUVD-2020-17886	7 Oct 202500:30	–	euvd
ICS	Host Engineering H2-ECOM100 Module	10 Dec 202000:00	–	ics
NVD	CVE-2020-25195	15 Dec 202020:15	–	nvd
OSV	CVE-2020-25195	15 Dec 202020:15	–	osv
Prion	Input validation	15 Dec 202020:15	–	prion
RedhatCVE	CVE-2020-25195	22 May 202515:22	–	redhatcve

NVD

Vulners

Node

hosteng h0-ecom100_firmwareRange≤4.0.348

AND

hosteng h0-ecom100Match6

Node

hosteng h0-ecom100_firmwareRange≤4.1.113

AND

hosteng h0-ecom100Match7

Node

hosteng h0-ecom100_firmwareRange≤5.0.149

AND

hosteng h0-ecom100Match9

Node

hosteng h2-ecom100_firmwareRange≤4.0.2148

AND

hosteng h2-ecom100Match5

Node

hosteng h2-ecom100_firmwareRange≤5.0.1043

AND

hosteng h2-ecom100Match8

Node

hosteng h4-ecom100_firmwareRange≤4.0.2148

AND

hosteng h4-ecom100Match-

[
  {
    "product": "Host Engineering H0-ECOM100 Module",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Hardware Versions 6x and prior with Firmware Versions 4.0.348 and prior"
      },
      {
        "status": "affected",
        "version": "Hardware Version 7x with Firmware Versions 4.1.113 and prior"
      },
      {
        "status": "affected",
        "version": "Hardware Version 9x with Firmware Versions 5.0.149 and prior"
      }
    ]
  },
  {
    "product": "Host Engineering H2-ECOM100 Module",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Hardware Versions 5x and prior with Firmware Versions 4.0.2148 and prior"
      },
      {
        "status": "affected",
        "version": "Hardware Version 8x with Firmware Versions 5.0.1043 and prior"
      }
    ]
  },
  {
    "product": "Host Engineering H4-ECOM100 Module",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware Versions 4.0.2148 and prior"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-20-345-02

21 Nov 2024 05:17Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

CVSS 27.8

EPSS0.00229

CWE-20