CVSS 4.0
8.7 highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:NCVE-2020-28400
High (8.7) in siemens. EPSS 1.9% chance of exploitation in the next 30 days.
Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.
Severity
CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H- EPSS
- 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
- CWE
- CWE-770
- Published
- Modified
- Record from
- the NVD, synced
Affected
- siemens:dk_standard_ethernet_controller_evaluation_kit_firmware
- siemens:ek-ertec_200_evaulation_kit_firmware
- siemens:ek-ertec_200p_evaluation_kit_firmware
- siemens:ruggedcom_rm1224_firmware
- siemens:scalance_m-800_firmware
- siemens:scalance_s615_firmware
- siemens:scalance_w1700_firmware
- siemens:scalance_w700_firmware
- siemens:scalance_x200-4_p_irt_firmware
- siemens:scalance_x201-3p_irt_firmware
- siemens:scalance_x201-3p_irt_pro_firmware
- siemens:scalance_x202-2_irt_firmware
- siemens:scalance_x202-2p_irt_pro_firmware
- siemens:scalance_x204-2_firmware
- siemens:scalance_x204-2fm_firmware
- siemens:scalance_x204-2ld_firmware
- siemens:scalance_x204-2ld_ts_firmware
- siemens:scalance_x204-2ts_firmware
- siemens:scalance_x204_irt_firmware
- siemens:scalance_x204_irt_pro_firmware
- siemens:scalance_x206-1_firmware
- siemens:scalance_x206-1ld_firmware
- siemens:scalance_x208_firmware
- siemens:scalance_x208pro_firmware
- siemens:scalance_x212-2_firmware
- siemens:scalance_x212-2ld_firmware
- siemens:scalance_x216_firmware
- siemens:scalance_x224_firmware
- siemens:scalance_x302-7eec_firmware
- siemens:scalance_x304-2fe_firmware
- siemens:scalance_x306-1ldfe_firmware
- siemens:scalance_x307-2eec_firmware
- siemens:scalance_x307-3_firmware
- siemens:scalance_x307-3ld_firmware
- siemens:scalance_x308-2_firmware
- siemens:scalance_x308-2ld_firmware
- siemens:scalance_x308-2lh\+_firmware
- siemens:scalance_x308-2lh_firmware
- siemens:scalance_x308-2m_firmware
- siemens:scalance_x308-2m_poe_firmware
- siemens:scalance_x308-2m_ts_firmware
- siemens:scalance_x310_firmware
- siemens:scalance_x310fe_firmware
- siemens:scalance_x320-1fe_firmware
- siemens:scalance_x320-3ldfe_firmware
- siemens:scalance_xb-200_firmware
- siemens:scalance_xc-200_firmware
- siemens:scalance_xf-200ba_firmware
- siemens:scalance_xf201-3p_irt_firmware
- siemens:scalance_xf202-2p_irt_firmware
References
- https://cert-portal.siemens.com/productcert/html/ssa-599968.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-599968.pdf
- https://us-cert.cisa.gov/ics/advisories/icsa-21-194-03
- https://cert-portal.siemens.com/productcert/html/ssa-599968.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-599968.pdf