CVE-2020-25242

Опубликовано: 12 мая 2021

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

A vulnerability has been identified in SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Lean (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Standard (incl. SIPLUS variants) (All versions). Specially crafted packets sent to TCP port 102 could cause a Denial-of-Service condition on the affected devices. A cold restart might be necessary in order to recover.

Ссылки

https://cert-portal.siemens.com/productcert/pdf/ssa-676775.pdf
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-676775.pdf
Vendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-131-07
Third Party Advisory
US Government Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-676775.pdf
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-676775.pdf
Vendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-131-07
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:siemens:simatic_net_cp_343-1_advanced_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_net_cp_343-1_advanced:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:siemens:simatic_net_cp_343-1_lean_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_net_cp_343-1_lean:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:siemens:simatic_net_cp_343-1_standard_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_net_cp_343-1_standard:-:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.00147

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-400

Связанные уязвимости

GHSA-73pj-g97w-qp62

github

больше 3 лет назад

EPSS

Процентиль: 36%

0.00147

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-400