Lucene search

[email protected]CVE-2020-25242

HistoryMay 12, 2021 - 2:15 p.m.

CVE-2020-25242

2021-05-1214:15:00

CWE-400

[email protected]

web.nvd.nist.gov

cve-2020-25242

simatic net

cp 343-1 advanced

cp 343-1 lean

cp 343-1 standard

siplus variants

denial-of-service

tcp port 102

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

54.8%

JSON

A vulnerability has been identified in SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Lean (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Standard (incl. SIPLUS variants) (All versions). Specially crafted packets sent to TCP port 102 could cause a Denial-of-Service condition on the affected devices. A cold restart might be necessary in order to recover.

CPENameOperatorVersion
siemens:simatic_net_cp_343-1_advanced_firmwaresiemens simatic net cp 343-1 advanced firmwareeq*
siemens:simatic_net_cp_343-1_lean_firmwaresiemens simatic net cp 343-1 lean firmwareeq*
siemens:simatic_net_cp_343-1_standard_firmwaresiemens simatic net cp 343-1 standard firmwareeq*

CPE	Name	Operator	Version
siemens:simatic_net_cp_343-1_advanced_firmware	siemens simatic net cp 343-1 advanced firmware	eq	*
siemens:simatic_net_cp_343-1_lean_firmware	siemens simatic net cp 343-1 lean firmware	eq	*
siemens:simatic_net_cp_343-1_standard_firmware	siemens simatic net cp 343-1 standard firmware	eq	*

References

cert-portal.siemens.com/productcert/pdf/ssa-676775.pdf

us-cert.cisa.gov/ics/advisories/icsa-21-131-07

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

54.8%

JSON

Related for CVE-2020-25242

ics1 nessus1 prion1