CVE-2020-25159

Опубликовано: 24 нояб. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

499ES EtherNet/IP (ENIP) Adaptor Source Code is vulnerable to a stack-based buffer overflow, which may allow an attacker to send a specially crafted packet that may result in a denial-of-service condition or code execution.

Ссылки

https://us-cert.cisa.gov/ics/advisories/icsa-20-324-03
Third Party Advisory
US Government Resource
https://us-cert.cisa.gov/ics/advisories/icsa-20-324-03
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:rtautomation:499es_ethernet\/ip_adaptor_firmware:*:*:*:*:*:*:*:*

Версия до 2.28 (исключая)

cpe:2.3:h:rtautomation:499es_ethernet\/ip_adaptor:-:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00504

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-121

CWE-787

Связанные уязвимости

GHSA-mxg2-jj7m-q6v8

github

больше 3 лет назад