Lucene search

[email protected]CVE-2020-28400

HistoryJul 13, 2021 - 11:15 a.m.

CVE-2020-28400

2021-07-1311:15:00

CWE-770

[email protected]

web.nvd.nist.gov

cve-2020-28400

vulnerability

denial of service

unauthenticated attacker

dcp reset packets

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

45.9%

JSON

Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.

CPENameOperatorVersion
siemens:dk_standard_ethernet_controller_evaluation_kit_firmwaresiemens dk standard ethernet controller evaluation kit firmwareeq*
siemens:ek-ertec_200_evaulation_kit_firmwaresiemens ek-ertec 200 evaulation kit firmwareeq*
siemens:ek-ertec_200p_evaluation_kit_firmwaresiemens ek-ertec 200p evaluation kit firmwarelt4.7
siemens:ruggedcom_rm1224_firmwaresiemens ruggedcom rm1224 firmwarelt6.4
siemens:scalance_m-800_firmwaresiemens scalance m-800 firmwarelt6.4
siemens:scalance_s615_firmwaresiemens scalance s615 firmwarelt6.4
siemens:scalance_w700_firmwaresiemens scalance w700 firmwareeq*
siemens:scalance_w1700_firmwaresiemens scalance w1700 firmwareeq*
siemens:scalance_x200-4_p_irt_firmwaresiemens scalance x200-4 p irt firmwarelt5.5.0
siemens:scalance_x201-3p_irt_firmwaresiemens scalance x201-3p irt firmwarelt5.5.0

CPE	Name	Operator	Version
siemens:dk_standard_ethernet_controller_evaluation_kit_firmware	siemens dk standard ethernet controller evaluation kit firmware	eq	*
siemens:ek-ertec_200_evaulation_kit_firmware	siemens ek-ertec 200 evaulation kit firmware	eq	*
siemens:ek-ertec_200p_evaluation_kit_firmware	siemens ek-ertec 200p evaluation kit firmware	lt	4.7
siemens:ruggedcom_rm1224_firmware	siemens ruggedcom rm1224 firmware	lt	6.4
siemens:scalance_m-800_firmware	siemens scalance m-800 firmware	lt	6.4
siemens:scalance_s615_firmware	siemens scalance s615 firmware	lt	6.4
siemens:scalance_w700_firmware	siemens scalance w700 firmware	eq	*
siemens:scalance_w1700_firmware	siemens scalance w1700 firmware	eq	*
siemens:scalance_x200-4_p_irt_firmware	siemens scalance x200-4 p irt firmware	lt	5.5.0
siemens:scalance_x201-3p_irt_firmware	siemens scalance x201-3p irt firmware	lt	5.5.0

Rows per page:

1-10 of 791

References

cert-portal.siemens.com/productcert/pdf/ssa-599968.pdf

us-cert.cisa.gov/ics/advisories/icsa-21-194-03

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

45.9%

JSON

Related for CVE-2020-28400

nessus1 prion1 ics1