high7.5
CVE-2020-28393
An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets.
Impact
An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device on the SCALANCE XM-400, XR-500 (All versions prior to v6.4).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Scalance Xm-400 Firmware | before 6.4 |
| Siemens | Scalance Xr524 Firmware | before 6.4 |
| Siemens | Scalance Xr526 Firmware | before 6.4 |
| Siemens | Scalance Xr528 Firmware | before 6.4 |
| Siemens | Scalance Xr552 Firmware | before 6.4 |
| Siemens | Scalance Xm416-4c Firmware | before 6.4 |
| Siemens | Scalance Xm408-8c Firmware | before 6.4 |
| Siemens | Scalance Xm408-4c Firmware | before 6.4 |
| Siemens | Scalance Xm416-4c L3 Firmware | before 6.4 |
| Siemens | Scalance Xm408-8c L3 Firmware | before 6.4 |
| Siemens | Scalance Xm408-4c L3 Firmware | before 6.4 |