high7.5
CVE-2020-28400
Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition.
Impact
Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Dk Standard Ethernet Controller Evaluation Kit Firmware | All versions |
| Siemens | Ek-Ertec 200 Evaulation Kit Firmware | All versions |
| Siemens | Ek-Ertec 200p Evaluation Kit Firmware | before 4.7 |
| Siemens | Ruggedcom Rm1224 Firmware | before 6.4 |
| Siemens | Scalance M-800 Firmware | before 6.4 |
| Siemens | Scalance S615 Firmware | before 6.4 |
| Siemens | Scalance W700 Firmware | All versions |
| Siemens | Scalance W1700 Firmware | All versions |
| Siemens | Scalance X200-4 P Irt Firmware | before 5.5.0 |
| Siemens | Scalance X201-3p Irt Firmware | before 5.5.0 |
| Siemens | Scalance X201-3p Irt Pro Firmware | before 5.5.0 |
| Siemens | Scalance X202-2 Irt Firmware | before 5.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cert-portal.siemens.com/productcert/html/ssa-599968.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-599968.pdf
- https://us-cert.cisa.gov/ics/advisories/icsa-21-194-03
- https://cert-portal.siemens.com/productcert/html/ssa-599968.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-599968.pdf
- https://us-cert.cisa.gov/ics/advisories/icsa-21-194-03