NVD Vulnerability Detail
Search Exploit, PoC
CVE-2020-28400
Summary

Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.

Publication Date July 13, 2021, 8:15 p.m.
Registration Date July 14, 2021, 10 a.m.
Last Update Nov. 21, 2024, 2:22 p.m.
CVSS3.1 : HIGH
スコア 7.5
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
攻撃元区分(AV) ネットワーク
攻撃条件の複雑さ(AC) 低
攻撃に必要な特権レベル(PR) 不要
利用者の関与(UI) 不要
影響の想定範囲(S) 変更なし
機密性への影響(C) なし
完全性への影響(I) なし
可用性への影響(A) 高
CVSS2.0 : MEDIUM
Score 5.0
Vector AV:N/AC:L/Au:N/C:N/I:N/A:P
攻撃元区分(AV) ネットワーク
攻撃条件の複雑さ(AC) 低
攻撃前の認証要否(Au) 不要
機密性への影響(C) なし
完全性への影響(I) なし
可用性への影響(A) 低
Get all privileges. いいえ
Get user privileges いいえ
Get other privileges いいえ
User operation required いいえ
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:o:siemens:dk_standard_ethernet_controller_evaluation_kit_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:dk_standard_ethernet_controller_evaluation_kit:-:*:*:*:*:*:*:*
Configuration2 or higher or less more than less than
cpe:2.3:o:siemens:ek-ertec_200_evaulation_kit_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:ek-ertec_200_evaulation_kit:-:*:*:*:*:*:*:*
Configuration3 or higher or less more than less than
cpe:2.3:o:siemens:ek-ertec_200p_evaluation_kit_firmware:*:*:*:*:*:*:*:* 4.7
execution environment
1 cpe:2.3:h:siemens:ek-ertec_200p_evaluation_kit:-:*:*:*:*:*:*:*
Configuration4 or higher or less more than less than
cpe:2.3:o:siemens:ruggedcom_rm1224_firmware:*:*:*:*:*:*:*:* 6.4
execution environment
1 cpe:2.3:h:siemens:ruggedcom_rm1224:-:*:*:*:*:*:*:*
Configuration5 or higher or less more than less than
cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:* 6.4
execution environment
1 cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*
Configuration6 or higher or less more than less than
cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:* 6.4
execution environment
1 cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*
Configuration7 or higher or less more than less than
cpe:2.3:o:siemens:scalance_w700_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_w700:-:*:*:*:*:*:*:*
Configuration8 or higher or less more than less than
cpe:2.3:o:siemens:scalance_w1700_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_w1700:-:*:*:*:*:*:*:*
Configuration9 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x200-4_p_irt_firmware:*:*:*:*:*:*:*:* 5.5.0
execution environment
1 cpe:2.3:h:siemens:scalance_x200-4_p_irt:-:*:*:*:*:*:*:*
Configuration10 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x201-3p_irt_firmware:*:*:*:*:*:*:*:* 5.5.0
execution environment
1 cpe:2.3:h:siemens:scalance_x201-3p_irt:-:*:*:*:*:*:*:*
Configuration11 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x201-3p_irt_pro_firmware:*:*:*:*:*:*:*:* 5.5.0
execution environment
1 cpe:2.3:h:siemens:scalance_x201-3p_irt_pro:-:*:*:*:*:*:*:*
Configuration12 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x202-2_irt_firmware:*:*:*:*:*:*:*:* 5.5.0
execution environment
1 cpe:2.3:h:siemens:scalance_x202-2_irt:-:*:*:*:*:*:*:*
Configuration13 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x202-2p_irt_pro_firmware:*:*:*:*:*:*:*:* 5.5.0
execution environment
1 cpe:2.3:h:siemens:scalance_x202-2p_irt_pro:-:*:*:*:*:*:*:*
Configuration14 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x204_irt_firmware:*:*:*:*:*:*:*:* 5.5.0
execution environment
1 cpe:2.3:h:siemens:scalance_x204_irt:-:*:*:*:*:*:*:*
Configuration15 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x204_irt_pro_firmware:*:*:*:*:*:*:*:* 5.5.0
execution environment
1 cpe:2.3:h:siemens:scalance_x204_irt_pro:-:*:*:*:*:*:*:*
Configuration16 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x204-2_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_x204-2_:-:*:*:*:*:*:*:*
Configuration17 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x204-2fm_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_x204-2fm:-:*:*:*:*:*:*:*
Configuration18 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x204-2ld_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_x204-2ld:-:*:*:*:*:*:*:*
Configuration19 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x204-2ld_ts_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_x204-2ld_ts:-:*:*:*:*:*:*:*
Configuration20 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x204-2ts_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_x204-2ts:-:*:*:*:*:*:*:*
Configuration21 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x206-1_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_x206-1:-:*:*:*:*:*:*:*
Configuration22 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x206-1ld_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_x206-1ld:-:*:*:*:*:*:*:*
Configuration23 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x208_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_x208:-:*:*:*:*:*:*:*
Configuration24 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x208pro_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_x208pro:-:*:*:*:*:*:*:*
Configuration25 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x212-2_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_x212-2:-:*:*:*:*:*:*:*
Configuration26 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x212-2ld_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_x212-2ld:-:*:*:*:*:*:*:*
Configuration27 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x216_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_x216:-:*:*:*:*:*:*:*
Configuration28 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x224_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_x224:-:*:*:*:*:*:*:*
Configuration29 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x302-7eec_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x302-7eec:-:*:*:*:*:*:*:*
Configuration30 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x304-2fe_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x304-2fe:-:*:*:*:*:*:*:*
Configuration31 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x306-1ldfe_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x306-1ldfe:-:*:*:*:*:*:*:*
Configuration32 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x307-2eec_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x307-2eec:-:*:*:*:*:*:*:*
Configuration33 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x307-3_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x307-3:-:*:*:*:*:*:*:*
Configuration34 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x307-3ld_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x307-3ld:-:*:*:*:*:*:*:*
Configuration35 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x308-2_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x308-2:-:*:*:*:*:*:*:*
Configuration36 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x308-2ld_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x308-2ld:-:*:*:*:*:*:*:*
Configuration37 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x308-2lh_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x308-2lh:-:*:*:*:*:*:*:*
Configuration38 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x308-2lh\+_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x308-2lh\+:-:*:*:*:*:*:*:*
Configuration39 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x308-2m_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x308-2m:-:*:*:*:*:*:*:*
Configuration40 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x308-2m_poe_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x308-2m_poe:-:*:*:*:*:*:*:*
Configuration41 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x308-2m_ts_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x308-2m_ts:-:*:*:*:*:*:*:*
Configuration42 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x310_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x310:-:*:*:*:*:*:*:*
Configuration43 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x310fe_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x310fe:-:*:*:*:*:*:*:*
Configuration44 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x320-1fe_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x320-1fe:-:*:*:*:*:*:*:*
Configuration45 or higher or less more than less than
cpe:2.3:o:siemens:scalance_x320-3ldfe_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_x320-3ldfe:-:*:*:*:*:*:*:*
Configuration46 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xb-200_firmware:*:*:*:*:*:*:*:* 4.3
execution environment
1 cpe:2.3:h:siemens:scalance_xb-200:-:*:*:*:*:*:*:*
Configuration47 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xc-200_firmware:*:*:*:*:*:*:*:* 4.3
execution environment
1 cpe:2.3:h:siemens:scalance_xc-200:-:*:*:*:*:*:*:*
Configuration48 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xf201-3p_irt_firmware:*:*:*:*:*:*:*:* 5.5.0
execution environment
1 cpe:2.3:h:siemens:scalance_xf201-3p_irt:-:*:*:*:*:*:*:*
Configuration49 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xf202-2p_irt_firmware:*:*:*:*:*:*:*:* 5.5.0
execution environment
1 cpe:2.3:h:siemens:scalance_xf202-2p_irt:-:*:*:*:*:*:*:*
Configuration50 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xf204_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_xf204:-:*:*:*:*:*:*:*
Configuration51 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xf204_irt_firmware:*:*:*:*:*:*:*:* 5.5.0
execution environment
1 cpe:2.3:h:siemens:scalance_xf204_irt:-:*:*:*:*:*:*:*
Configuration52 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xf204-2_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_xf204-2_:-:*:*:*:*:*:*:*
Configuration53 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xf204-2ba_irt_firmware:*:*:*:*:*:*:*:* 5.5.0
execution environment
1 cpe:2.3:h:siemens:scalance_xf204-2ba_irt:-:*:*:*:*:*:*:*
Configuration54 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xf206-1_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_xf206-1:-:*:*:*:*:*:*:*
Configuration55 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xf208_firmware:*:*:*:*:*:*:*:* 5.2.5
execution environment
1 cpe:2.3:h:siemens:scalance_xf208:-:*:*:*:*:*:*:*
Configuration56 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xf-200ba_firmware:*:*:*:*:*:*:*:* 4.3
execution environment
1 cpe:2.3:h:siemens:scalance_xf-200ba:-:*:*:*:*:*:*:*
Configuration57 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xm400_firmware:*:*:*:*:*:*:*:* 6.3.1
execution environment
1 cpe:2.3:h:siemens:scalance_xm400:-:*:*:*:*:*:*:*
Configuration58 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xp-200_firmware:*:*:*:*:*:*:*:* 4.3
execution environment
1 cpe:2.3:h:siemens:scalance_xp-200:-:*:*:*:*:*:*:*
Configuration59 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xr324-4m_eec_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_xr324-4m_eec:-:*:*:*:*:*:*:*
Configuration60 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xr324-4m_poe_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_xr324-4m_poe:-:*:*:*:*:*:*:*
Configuration61 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xr324-4m_poe_ts_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_xr324-4m_poe_ts:-:*:*:*:*:*:*:*
Configuration62 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xr324-12m_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_xr324-12m:-:*:*:*:*:*:*:*
Configuration63 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xr324-12m_ts_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:scalance_xr324-12m_ts:-:*:*:*:*:*:*:*
Configuration64 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xr500_firmware:*:*:*:*:*:*:*:* 6.3.1
execution environment
1 cpe:2.3:h:siemens:scalance_xr500:-:*:*:*:*:*:*:*
Configuration65 or higher or less more than less than
cpe:2.3:o:siemens:scalance_xr-300wg_firmware:*:*:*:*:*:*:*:* 4.3
execution environment
1 cpe:2.3:h:siemens:scalance_xr-300wg:-:*:*:*:*:*:*:*
Configuration66 or higher or less more than less than
cpe:2.3:o:siemens:simatic_cfu_pa_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:simatic_cfu_pa:-:*:*:*:*:*:*:*
Configuration67 or higher or less more than less than
cpe:2.3:o:siemens:simatic_ie\/pb-link_v3_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:simatic_ie\/pb-link_v3:-:*:*:*:*:*:*:*
Configuration68 or higher or less more than less than
cpe:2.3:o:siemens:simatic_mv500_firmware:*:*:*:*:*:*:*:* 3.0
execution environment
1 cpe:2.3:h:siemens:simatic_mv500:-:*:*:*:*:*:*:*
Configuration69 or higher or less more than less than
cpe:2.3:o:siemens:simatic_net_cm_1542-1_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:simatic_net_cm_1542-1:-:*:*:*:*:*:*:*
Configuration70 or higher or less more than less than
cpe:2.3:o:siemens:simatic_net_cp1616_firmware:*:*:*:*:*:*:*:* 2.7
execution environment
1 cpe:2.3:h:siemens:simatic_net_cp1616:-:*:*:*:*:*:*:*
Configuration71 or higher or less more than less than
cpe:2.3:o:siemens:simatic_net_cp1604_firmware:*:*:*:*:*:*:*:* 2.7
execution environment
1 cpe:2.3:h:siemens:simatic_net_cp1604:-:*:*:*:*:*:*:*
Configuration72 or higher or less more than less than
cpe:2.3:o:siemens:simatic_net_cp1626_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:simatic_net_cp1626:-:*:*:*:*:*:*:*
Configuration73 or higher or less more than less than
cpe:2.3:a:siemens:simatic_net_dk-16xx_pn_io:*:*:*:*:*:*:*:* 2.7
Configuration74 or higher or less more than less than
cpe:2.3:o:siemens:simatic_power_line_booster_plb_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:simatic_power_line_booster_plb:-:*:*:*:*:*:*:*
Configuration75 or higher or less more than less than
cpe:2.3:o:siemens:simatic_profinet_driver_firmware:*:*:*:*:*:*:*:* 2.3
execution environment
1 cpe:2.3:h:siemens:simatic_profinet_driver:-:*:*:*:*:*:*:*
Configuration76 or higher or less more than less than
cpe:2.3:o:siemens:simatic_s7-1200_firmware:*:*:*:*:*:*:*:* 4.5
execution environment
1 cpe:2.3:h:siemens:simatic_s7-1200:-:*:*:*:*:*:*:*
Configuration77 or higher or less more than less than
cpe:2.3:o:siemens:simocode_prov_ethernet\/ip_firmware:*:*:*:*:*:*:*:* 1.1.3
execution environment
1 cpe:2.3:h:siemens:simocode_prov_ethernet\/ip:-:*:*:*:*:*:*:*
Configuration78 or higher or less more than less than
cpe:2.3:o:siemens:simocode_prov_profinet_firmware:*:*:*:*:*:*:*:* 2.1.3
execution environment
1 cpe:2.3:h:siemens:simocode_prov_profinet:-:*:*:*:*:*:*:*
Configuration79 or higher or less more than less than
cpe:2.3:o:siemens:softnet-ie_pnio_firmware:*:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:siemens:softnet-ie_pnio:-:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List
JVN Vulnerability Information
複数のシーメンス製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性
Title 複数のシーメンス製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性
Summary

複数のシーメンス製品には、制限またはスロットリング無しのリソースの割り当てに関する脆弱性が存在します。

Possible impacts サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution

ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。

Publication Date July 13, 2021, midnight
Registration Date June 22, 2022, 11:38 a.m.
Last Update June 22, 2022, 11:38 a.m.
Affected System
シーメンス
DK Standard Ethernet Controller Evaluation Kit ファームウェア 
EK-ERTEC 200 Evaluation Kit ファームウェア 
EK-ERTEC 200P Evaluation Kit ファームウェア 
RUGGEDCOM RM1224 ファームウェア 
SCALANCE M-800 ファームウェア 
SCALANCE S615 ファームウェア 
SCALANCE W1700 ファームウェア 
SCALANCE W700 ファームウェア 
SCALANCE X200-4P IRT ファームウェア 
SCALANCE X201-3P IRT ファームウェア 
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
その他
Change Log
No Changed Details Date of change
1 [2022年06月10日]   掲載 June 10, 2022, 12:14 p.m.