Lucene search

PRIOn knowledge basePRION:CVE-2020-28400

HistoryJul 13, 2021 - 11:15 a.m.

Race condition

2021-07-1311:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

46.3%

JSON

Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.

CPENameOperatorVersion
ek-ertec_200p_evaluation_kit_firmwarelt4.7
ruggedcom_rm1224_firmwarelt6.4
scalance_m-800_firmwarelt6.4
scalance_s615_firmwarelt6.4
scalance_x200-4_p_irt_firmwarelt5.5.0
scalance_x201-3p_irt_firmwarelt5.5.0
scalance_x201-3p_irt_pro_firmwarelt5.5.0
scalance_x202-2_irt_firmwarelt5.5.0
scalance_x202-2p_irt_pro_firmwarelt5.5.0
scalance_x204-2_firmwarelt5.2.5

Name	Operator	Version
ek-ertec_200p_evaluation_kit_firmware	lt	4.7
ruggedcom_rm1224_firmware	lt	6.4
scalance_m-800_firmware	lt	6.4
scalance_s615_firmware	lt	6.4
scalance_x200-4_p_irt_firmware	lt	5.5.0
scalance_x201-3p_irt_firmware	lt	5.5.0
scalance_x201-3p_irt_pro_firmware	lt	5.5.0
scalance_x202-2_irt_firmware	lt	5.5.0
scalance_x202-2p_irt_pro_firmware	lt	5.5.0
scalance_x204-2_firmware	lt	5.2.5

Rows per page:

1-10 of 471

References

cert-portal.siemens.com/productcert/pdf/ssa-599968.pdf

us-cert.cisa.gov/ics/advisories/icsa-21-194-03

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

46.3%

JSON

Related for PRION:CVE-2020-28400