{"cve":"CVE-2020-28400","nvd":{"published":"2021-07-13T11:15:08.960","modified":"2026-06-17T03:10:23.210","status":"Modified","description":"Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.","cvss_v4":{"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","score":8.7},"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5},"cwes":["CWE-770"],"references":["https://cert-portal.siemens.com/productcert/html/ssa-599968.html","https://cert-portal.siemens.com/productcert/pdf/ssa-599968.pdf","https://us-cert.cisa.gov/ics/advisories/icsa-21-194-03","https://cert-portal.siemens.com/productcert/html/ssa-599968.html","https://cert-portal.siemens.com/productcert/pdf/ssa-599968.pdf"],"products":["siemens:dk_standard_ethernet_controller_evaluation_kit_firmware","siemens:ek-ertec_200_evaulation_kit_firmware","siemens:ek-ertec_200p_evaluation_kit_firmware","siemens:ruggedcom_rm1224_firmware","siemens:scalance_m-800_firmware","siemens:scalance_s615_firmware","siemens:scalance_w1700_firmware","siemens:scalance_w700_firmware","siemens:scalance_x200-4_p_irt_firmware","siemens:scalance_x201-3p_irt_firmware","siemens:scalance_x201-3p_irt_pro_firmware","siemens:scalance_x202-2_irt_firmware","siemens:scalance_x202-2p_irt_pro_firmware","siemens:scalance_x204-2_firmware","siemens:scalance_x204-2fm_firmware","siemens:scalance_x204-2ld_firmware","siemens:scalance_x204-2ld_ts_firmware","siemens:scalance_x204-2ts_firmware","siemens:scalance_x204_irt_firmware","siemens:scalance_x204_irt_pro_firmware","siemens:scalance_x206-1_firmware","siemens:scalance_x206-1ld_firmware","siemens:scalance_x208_firmware","siemens:scalance_x208pro_firmware","siemens:scalance_x212-2_firmware","siemens:scalance_x212-2ld_firmware","siemens:scalance_x216_firmware","siemens:scalance_x224_firmware","siemens:scalance_x302-7eec_firmware","siemens:scalance_x304-2fe_firmware","siemens:scalance_x306-1ldfe_firmware","siemens:scalance_x307-2eec_firmware","siemens:scalance_x307-3_firmware","siemens:scalance_x307-3ld_firmware","siemens:scalance_x308-2_firmware","siemens:scalance_x308-2ld_firmware","siemens:scalance_x308-2lh\\+_firmware","siemens:scalance_x308-2lh_firmware","siemens:scalance_x308-2m_firmware","siemens:scalance_x308-2m_poe_firmware","siemens:scalance_x308-2m_ts_firmware","siemens:scalance_x310_firmware","siemens:scalance_x310fe_firmware","siemens:scalance_x320-1fe_firmware","siemens:scalance_x320-3ldfe_firmware","siemens:scalance_xb-200_firmware","siemens:scalance_xc-200_firmware","siemens:scalance_xf-200ba_firmware","siemens:scalance_xf201-3p_irt_firmware","siemens:scalance_xf202-2p_irt_firmware"],"source":"nvd","synced_at":"2026-10-19T21:21:13.713336758+00:00"},"epss":{"cve":"CVE-2020-28400","score":0.01856,"percentile":0.7919,"date":"2026-11-01"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}