CVE & CISA-KEV Catalog

CVE-2020-28400

HIGHEPSS 77th pctl
7.5
CVSS v3
NVD

Description

Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.

How to fix

Remediation Available
ek-ertec 200p evaluation kit firmwareNVD
Affected:< 4.7Fixed in:4.7CVE-2020-28400derived from NVD
ruggedcom rm1224 firmwareNVD
Affected:< 6.4Fixed in:6.4CVE-2020-28400derived from NVD
scalance m-800 firmwareNVD
Affected:< 6.4Fixed in:6.4CVE-2020-28400derived from NVD
scalance s615 firmwareNVD
Affected:< 6.4Fixed in:6.4CVE-2020-28400derived from NVD
scalance x200-4 p irt firmwareNVD
Affected:< 5.5.0Fixed in:5.5.0CVE-2020-28400derived from NVD
scalance x201-3p irt firmwareNVD
Affected:< 5.5.0Fixed in:5.5.0CVE-2020-28400derived from NVD
scalance x201-3p irt pro firmwareNVD
Affected:< 5.5.0Fixed in:5.5.0CVE-2020-28400derived from NVD
scalance x202-2 irt firmwareNVD
Affected:< 5.5.0Fixed in:5.5.0CVE-2020-28400derived from NVD
scalance x202-2p irt pro firmwareNVD
Affected:< 5.5.0Fixed in:5.5.0CVE-2020-28400derived from NVD
scalance x204-2 firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance x204-2fm firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance x204-2ld firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance x204-2ld ts firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance x204-2ts firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance x204 irt firmwareNVD
Affected:< 5.5.0Fixed in:5.5.0CVE-2020-28400derived from NVD
scalance x204 irt pro firmwareNVD
Affected:< 5.5.0Fixed in:5.5.0CVE-2020-28400derived from NVD
scalance x206-1 firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance x206-1ld firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance x208 firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance x208pro firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance x212-2 firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance x212-2ld firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance x216 firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance x224 firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance xb-200 firmwareNVD
Affected:< 4.3Fixed in:4.3CVE-2020-28400derived from NVD
scalance xc-200 firmwareNVD
Affected:< 4.3Fixed in:4.3CVE-2020-28400derived from NVD
scalance xf-200ba firmwareNVD
Affected:< 4.3Fixed in:4.3CVE-2020-28400derived from NVD
scalance xf201-3p irt firmwareNVD
Affected:< 5.5.0Fixed in:5.5.0CVE-2020-28400derived from NVD
scalance xf202-2p irt firmwareNVD
Affected:< 5.5.0Fixed in:5.5.0CVE-2020-28400derived from NVD
scalance xf204-2 firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance xf204-2ba irt firmwareNVD
Affected:< 5.5.0Fixed in:5.5.0CVE-2020-28400derived from NVD
scalance xf204 firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance xf204 irt firmwareNVD
Affected:< 5.5.0Fixed in:5.5.0CVE-2020-28400derived from NVD
scalance xf206-1 firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance xf208 firmwareNVD
Affected:< 5.2.5Fixed in:5.2.5CVE-2020-28400derived from NVD
scalance xm400 firmwareNVD
Affected:< 6.3.1Fixed in:6.3.1CVE-2020-28400derived from NVD
scalance xp-200 firmwareNVD
Affected:< 4.3Fixed in:4.3CVE-2020-28400derived from NVD
scalance xr-300wg firmwareNVD
Affected:< 4.3Fixed in:4.3CVE-2020-28400derived from NVD
scalance xr500 firmwareNVD
Affected:< 6.3.1Fixed in:6.3.1CVE-2020-28400derived from NVD
simatic mv500 firmwareNVD
Affected:< 3.0Fixed in:3.0CVE-2020-28400derived from NVD
simatic profinet driver firmwareNVD
Affected:< 2.3Fixed in:2.3CVE-2020-28400derived from NVD
simatic s7-1200 firmwareNVD
Affected:< 4.5Fixed in:4.5CVE-2020-28400derived from NVD
simocode prov ethernet\/ip firmwareNVD
Affected:< 1.1.3Fixed in:1.1.3CVE-2020-28400derived from NVD
simocode prov profinet firmwareNVD
Affected:< 2.1.3Fixed in:2.1.3CVE-2020-28400derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityNone
IntegrityNone
AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploit Intelligence

1.86%probability of exploitation in 30 days
77thpercentile

Elevated risk: more likely to be exploited than 77% of all known CVEs.

References

Third-Party Advisory1
Other references1

Related Vulnerabilities

Other CWE-770 (Allocation of Resources Without Limits or Throttling) vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2023-50387High7.5100%-Fix
CVE-2019-11478Medium5.395%-Fix
CVE-2019-11479High7.592%-Fix
CVE-2024-27316High7.591%-Fix
CVE-2022-30522High7.590%-Fix
CVE-2019-9515High7.588%-Fix
Embed a live status badge for CVE-2020-28400
CVE-2020-28400 severity badge

Markdown

[![CVE-2020-28400](https://tridentstack.com/cve/badge/CVE-2020-28400.svg)](https://tridentstack.com/cve/CVE-2020-28400)

HTML

<a href="https://tridentstack.com/cve/CVE-2020-28400"><img src="https://tridentstack.com/cve/badge/CVE-2020-28400.svg" alt="CVE-2020-28400"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-12-10.