Siemens PROFINET Devices

🗓️ 13 Jul 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 69 Views

Siemens PROFINET Devices Vulnerability (Update D) includes resource allocation issue allowing denial-of-service attacks

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2020-28400	13 Jul 202111:15	–	attackerkb
CNNVD	Siemens RUGGEDCOM和Siemens SCALANCE 安全漏洞	13 Jul 202100:00	–	cnnvd
CVE	CVE-2020-28400	13 Jul 202111:02	–	cve
Cvelist	CVE-2020-28400	13 Jul 202111:02	–	cvelist
EUVD	EUVD-2020-20859	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Siemens Scalance products	10 Aug 202100:00	–	ncsc
NVD	CVE-2020-28400	13 Jul 202111:15	–	nvd
OSV	CVE-2020-28400	13 Jul 202111:15	–	osv
Prion	Race condition	13 Jul 202111:15	–	prion
Positive Technologies	PT-2021-11518 · Siemens +1 · Development Evaluation Kits For Profinet Io Dk Standard Ethernet Controller +178	13 Jul 202100:00	–	ptsecurity

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-599968.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-599968.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-194-03.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-194-03
cisa	www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b

13 Jul 2021 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 25

CVSS 3.17.5

CVSS 48.7

EPSS0.0108

SSVC

siemens profinet devices vulnerability resource allocation denial-of-service remote exploitation network devices security advisory