CVE-2020-28400

Katalog CVE

CVSS 7.5 · High EPSS 1,9%

Kerentanan Allocation of Resources Without Limits or Throttling pada siemens dk standard ethernet controller evaluation kit firmware, siemens ek-ertec 200 evaulation kit firmware +58 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.

Rincian

Terbit di NVD

13 Juli 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

1,9% peluang dieksploitasi; lebih tinggi dari 78,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 79 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://cert-portal.siemens.com/productcert/pdf/ssa-599968.pdf patch · advisory vendor
• https://us-cert.cisa.gov/ics/advisories/icsa-21-194-03 advisory pihak ketiga · pemerintah AS
• https://cert-portal.siemens.com/productcert/html/ssa-599968.html