CVE-2020-28400

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 13-07-2021 01:15

Last modified: - 12-04-2022 11:15

Total changes: - 8

Description

Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Low

Attack complexity

Network

Attack vector

High

Availability

None

Confidentiality

None

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

7.5

Base score

3.9

3.6

Exploitability score

Impact score

Verification logic

AND

vendor=siemens AND product=dk_standard_ethernet_controller_evaluation_kit_firmware

vendor=siemens AND product=dk_standard_ethernet_controller_evaluation_kit AND version=-

AND

vendor=siemens AND product=ek-ertec_200_evaulation_kit_firmware

vendor=siemens AND product=ek-ertec_200_evaulation_kit AND version=-

AND

vendor=siemens AND product=ek-ertec_200p_evaluation_kit_firmware AND versionEndExcluding=4.7

vendor=siemens AND product=ek-ertec_200p_evaluation_kit AND version=-

AND

vendor=siemens AND product=ruggedcom_rm1224_firmware AND versionEndExcluding=6.4

vendor=siemens AND product=ruggedcom_rm1224 AND version=-

AND

vendor=siemens AND product=scalance_m-800_firmware AND versionEndExcluding=6.4

vendor=siemens AND product=scalance_m-800 AND version=-

AND

vendor=siemens AND product=scalance_s615_firmware AND versionEndExcluding=6.4

vendor=siemens AND product=scalance_s615 AND version=-

AND

vendor=siemens AND product=scalance_w700_firmware

vendor=siemens AND product=scalance_w700 AND version=-

AND

vendor=siemens AND product=scalance_w1700_firmware

vendor=siemens AND product=scalance_w1700 AND version=-

AND

vendor=siemens AND product=scalance_x200-4_p_irt_firmware AND versionEndExcluding=5.5.0

vendor=siemens AND product=scalance_x200-4_p_irt AND version=-

AND

vendor=siemens AND product=scalance_x201-3p_irt_firmware AND versionEndExcluding=5.5.0

vendor=siemens AND product=scalance_x201-3p_irt AND version=-

AND

vendor=siemens AND product=scalance_x201-3p_irt_pro_firmware AND versionEndExcluding=5.5.0

vendor=siemens AND product=scalance_x201-3p_irt_pro AND version=-

AND

vendor=siemens AND product=scalance_x202-2_irt_firmware AND versionEndExcluding=5.5.0

vendor=siemens AND product=scalance_x202-2_irt AND version=-

AND

vendor=siemens AND product=scalance_x202-2p_irt_pro_firmware AND versionEndExcluding=5.5.0

vendor=siemens AND product=scalance_x202-2p_irt_pro AND version=-

AND

vendor=siemens AND product=scalance_x204_irt_firmware AND versionEndExcluding=5.5.0

vendor=siemens AND product=scalance_x204_irt AND version=-

AND

vendor=siemens AND product=scalance_x204_irt_pro_firmware AND versionEndExcluding=5.5.0

vendor=siemens AND product=scalance_x204_irt_pro AND version=-

AND

vendor=siemens AND product=scalance_x204-2_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_x204-2_ AND version=-

AND

vendor=siemens AND product=scalance_x204-2fm_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_x204-2fm AND version=-

AND

vendor=siemens AND product=scalance_x204-2ld_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_x204-2ld AND version=-

AND

vendor=siemens AND product=scalance_x204-2ld_ts_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_x204-2ld_ts AND version=-

AND

vendor=siemens AND product=scalance_x204-2ts_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_x204-2ts AND version=-

AND

vendor=siemens AND product=scalance_x206-1_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_x206-1 AND version=-

AND

vendor=siemens AND product=scalance_x206-1ld_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_x206-1ld AND version=-

AND

vendor=siemens AND product=scalance_x208_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_x208 AND version=-

AND

vendor=siemens AND product=scalance_x208pro_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_x208pro AND version=-

AND

vendor=siemens AND product=scalance_x212-2_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_x212-2 AND version=-

AND

vendor=siemens AND product=scalance_x212-2ld_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_x212-2ld AND version=-

AND

vendor=siemens AND product=scalance_x216_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_x216 AND version=-

AND

vendor=siemens AND product=scalance_x224_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_x224 AND version=-

AND

vendor=siemens AND product=scalance_x302-7eec_firmware

vendor=siemens AND product=scalance_x302-7eec AND version=-

AND

vendor=siemens AND product=scalance_x304-2fe_firmware

vendor=siemens AND product=scalance_x304-2fe AND version=-

AND

vendor=siemens AND product=scalance_x306-1ldfe_firmware

vendor=siemens AND product=scalance_x306-1ldfe AND version=-

AND

vendor=siemens AND product=scalance_x307-2eec_firmware

vendor=siemens AND product=scalance_x307-2eec AND version=-

AND

vendor=siemens AND product=scalance_x307-3_firmware

vendor=siemens AND product=scalance_x307-3 AND version=-

AND

vendor=siemens AND product=scalance_x307-3ld_firmware

vendor=siemens AND product=scalance_x307-3ld AND version=-

AND

vendor=siemens AND product=scalance_x308-2_firmware

vendor=siemens AND product=scalance_x308-2 AND version=-

AND

vendor=siemens AND product=scalance_x308-2ld_firmware

vendor=siemens AND product=scalance_x308-2ld AND version=-

AND

vendor=siemens AND product=scalance_x308-2lh_firmware

vendor=siemens AND product=scalance_x308-2lh AND version=-

AND

vendor=siemens AND product=scalance_x308-2lh\+_firmware

vendor=siemens AND product=scalance_x308-2lh\+ AND version=-

AND

vendor=siemens AND product=scalance_x308-2m_firmware

vendor=siemens AND product=scalance_x308-2m AND version=-

AND

vendor=siemens AND product=scalance_x308-2m_poe_firmware

vendor=siemens AND product=scalance_x308-2m_poe AND version=-

AND

vendor=siemens AND product=scalance_x308-2m_ts_firmware

vendor=siemens AND product=scalance_x308-2m_ts AND version=-

AND

vendor=siemens AND product=scalance_x310_firmware

vendor=siemens AND product=scalance_x310 AND version=-

AND

vendor=siemens AND product=scalance_x310fe_firmware

vendor=siemens AND product=scalance_x310fe AND version=-

AND

vendor=siemens AND product=scalance_x320-1fe_firmware

vendor=siemens AND product=scalance_x320-1fe AND version=-

AND

vendor=siemens AND product=scalance_x320-3ldfe_firmware

vendor=siemens AND product=scalance_x320-3ldfe AND version=-

AND

vendor=siemens AND product=scalance_xb-200_firmware AND versionEndExcluding=4.3

vendor=siemens AND product=scalance_xb-200 AND version=-

AND

vendor=siemens AND product=scalance_xc-200_firmware AND versionEndExcluding=4.3

vendor=siemens AND product=scalance_xc-200 AND version=-

AND

vendor=siemens AND product=scalance_xf201-3p_irt_firmware AND versionEndExcluding=5.5.0

vendor=siemens AND product=scalance_xf201-3p_irt AND version=-

AND

vendor=siemens AND product=scalance_xf202-2p_irt_firmware AND versionEndExcluding=5.5.0

vendor=siemens AND product=scalance_xf202-2p_irt AND version=-

AND

vendor=siemens AND product=scalance_xf204_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_xf204 AND version=-

AND

vendor=siemens AND product=scalance_xf204_irt_firmware AND versionEndExcluding=5.5.0

vendor=siemens AND product=scalance_xf204_irt AND version=-

AND

vendor=siemens AND product=scalance_xf204-2_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_xf204-2_ AND version=-

AND

vendor=siemens AND product=scalance_xf204-2ba_irt_firmware AND versionEndExcluding=5.5.0

vendor=siemens AND product=scalance_xf204-2ba_irt AND version=-

AND

vendor=siemens AND product=scalance_xf206-1_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_xf206-1 AND version=-

AND

vendor=siemens AND product=scalance_xf208_firmware AND versionEndExcluding=5.2.5

vendor=siemens AND product=scalance_xf208 AND version=-

AND

vendor=siemens AND product=scalance_xf-200ba_firmware AND versionEndExcluding=4.3

vendor=siemens AND product=scalance_xf-200ba AND version=-

AND

vendor=siemens AND product=scalance_xm400_firmware AND versionEndExcluding=6.3.1

vendor=siemens AND product=scalance_xm400 AND version=-

AND

vendor=siemens AND product=scalance_xp-200_firmware AND versionEndExcluding=4.3

vendor=siemens AND product=scalance_xp-200 AND version=-

AND

vendor=siemens AND product=scalance_xr324-4m_eec_firmware

vendor=siemens AND product=scalance_xr324-4m_eec AND version=-

AND

vendor=siemens AND product=scalance_xr324-4m_poe_firmware

vendor=siemens AND product=scalance_xr324-4m_poe AND version=-

AND

vendor=siemens AND product=scalance_xr324-4m_poe_ts_firmware

vendor=siemens AND product=scalance_xr324-4m_poe_ts AND version=-

AND

vendor=siemens AND product=scalance_xr324-12m_firmware

vendor=siemens AND product=scalance_xr324-12m AND version=-

AND

vendor=siemens AND product=scalance_xr324-12m_ts_firmware

vendor=siemens AND product=scalance_xr324-12m_ts AND version=-

AND

vendor=siemens AND product=scalance_xr500_firmware AND versionEndExcluding=6.3.1

vendor=siemens AND product=scalance_xr500 AND version=-

AND

vendor=siemens AND product=scalance_xr-300wg_firmware AND versionEndExcluding=4.3

vendor=siemens AND product=scalance_xr-300wg AND version=-

AND

vendor=siemens AND product=simatic_cfu_pa_firmware

vendor=siemens AND product=simatic_cfu_pa AND version=-

AND

vendor=siemens AND product=simatic_ie\/pb-link_v3_firmware

vendor=siemens AND product=simatic_ie\/pb-link_v3 AND version=-

AND

vendor=siemens AND product=simatic_mv500_firmware AND versionEndExcluding=3.0

vendor=siemens AND product=simatic_mv500 AND version=-

AND

vendor=siemens AND product=simatic_net_cm_1542-1_firmware

vendor=siemens AND product=simatic_net_cm_1542-1 AND version=-

AND

vendor=siemens AND product=simatic_net_cp1616_firmware AND versionEndIncluding=2.7

vendor=siemens AND product=simatic_net_cp1616 AND version=-

AND

vendor=siemens AND product=simatic_net_cp1604_firmware AND versionEndIncluding=2.7

vendor=siemens AND product=simatic_net_cp1604 AND version=-

AND

vendor=siemens AND product=simatic_net_cp1626_firmware

vendor=siemens AND product=simatic_net_cp1626 AND version=-

vendor=siemens AND product=simatic_net_dk-16xx_pn_io AND versionEndIncluding=2.7

AND

vendor=siemens AND product=simatic_power_line_booster_plb_firmware

vendor=siemens AND product=simatic_power_line_booster_plb AND version=-

AND

vendor=siemens AND product=simatic_profinet_driver_firmware AND versionEndExcluding=2.3

vendor=siemens AND product=simatic_profinet_driver AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_firmware AND versionEndExcluding=4.5

vendor=siemens AND product=simatic_s7-1200 AND version=-

AND

vendor=siemens AND product=simocode_prov_ethernet\/ip_firmware AND versionEndExcluding=1.1.3

vendor=siemens AND product=simocode_prov_ethernet\/ip AND version=-

AND

vendor=siemens AND product=simocode_prov_profinet_firmware AND versionEndExcluding=2.1.3

vendor=siemens AND product=simocode_prov_profinet AND version=-

AND

vendor=siemens AND product=softnet-ie_pnio_firmware

vendor=siemens AND product=softnet-ie_pnio AND version=-

Reference

N/A-Patch, Vendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-194-03

Keywords

CVE-2020-28400

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2020-28400

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures