CVE-2020-13987

Published: Dic 11, 2020 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2020-6157 Aliases: GSD-2020-13987
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,5
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: high
MEDIUM 5,0
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: none
Integrity: none
Availability: partial

Description

AI Translation Available

An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0019
Percentile
0,4th
Updated

EPSS Score Trend (Last 90 Days)

125

Out-of-bounds Read

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Availability Other
Potential Impacts:
Read Memory Bypass Protection Mechanism Dos: Crash, Exit, Or Restart Varies By Context
Applicable Platforms
Languages: C, C++, Memory-Unsafe
Technologies: ICS/OT
View CWE Details
Operating System

Sentron 3Va Com800 Firmware by Siemens

Product Information
Vendor Siemens
Product Sentron 3Va Com800 Firmware
Version Range Affected
To 4.4.1 (exclusive)
cpe:2.3:o:siemens:sentron_3va_com800_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Sentron 3Va Com100 Firmware by Siemens

Product Information
Vendor Siemens
Product Sentron 3Va Com100 Firmware
Version Range Affected
To 4.4.1 (exclusive)
cpe:2.3:o:siemens:sentron_3va_com100_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Open-Iscsi by Open-Iscsi Project

Product Information
Vendor Open-Iscsi Project
Product Open-Iscsi
Version Range Affected
To 2.1.12 (inclusive)
cpe:2.3:a:open-iscsi_project:open-iscsi:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Sentron Pac3200 Firmware by Siemens

Product Information
Vendor Siemens
Product Sentron Pac3200 Firmware
Version Range Affected
To 2.4.7 (exclusive)
cpe:2.3:o:siemens:sentron_pac3200_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Uip by Uip Project

Product Information
Vendor Uip Project
Product Uip
Version Range Affected
To 1.0 (inclusive)
cpe:2.3:a:uip_project:uip:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Sentron Pac4200 Firmware by Siemens

Product Information
Vendor Siemens
Product Sentron Pac4200 Firmware
Version Range Affected
To 2.3.0 (exclusive)
cpe:2.3:o:siemens:sentron_pac4200_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://cert-portal.siemens.com/productcert/pdf/ssa-541018.…
Patch Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-541018.pdf
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
Third Party Advisory US Government Resource
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
https://www.kb.cert.org/vuls/id/815128
Third Party Advisory US Government Resource
https://www.kb.cert.org/vuls/id/815128
https://cert-portal.siemens.com/productcert/pdf/ssa-541018.…
Patch Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-541018.pdf
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
Third Party Advisory US Government Resource
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
https://www.kb.cert.org/vuls/id/815128
Third Party Advisory US Government Resource
https://www.kb.cert.org/vuls/id/815128