high7.5
CVE-2020-13987
An issue was discovered in Contiki through 3.0.
Impact
An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Uip Project | Uip | through 1.0 |
| Open-Iscsi Project | Open-Iscsi | through 2.1.12 |
| Siemens | Sentron 3va Com100 Firmware | before 4.4.1 |
| Siemens | Sentron 3va Com800 Firmware | before 4.4.1 |
| Siemens | Sentron Pac3200 Firmware | before 2.4.7 |
| Siemens | Sentron Pac4200 Firmware | before 2.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cert-portal.siemens.com/productcert/pdf/ssa-541018.pdf
- https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
- https://www.kb.cert.org/vuls/id/815128
- https://cert-portal.siemens.com/productcert/pdf/ssa-541018.pdf
- https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
- https://www.kb.cert.org/vuls/id/815128