CVE-2020-17437
mediumPriorität · verfolgen · 34Stack-Kampagne · AMNESIA:33EPSS 0.028 · 86. PerzentilDEEURUUSEPSS · bewertet 2026-10-27
An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenSENTRON 3VA COM100/800siemens_psirt
Update to V4.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109765343/ - BehobenSENTRON 3VA DSP800siemens_psirt
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799046/ - BehobenSENTRON PAC2200 (with MID Approval)siemens_psirt
MID-certified devices do not support firmware updates; V3.2.2 is contained in devices that are labeled as "M22 MID"
- BehobenSENTRON PAC2200 (without MID Approval)siemens_psirt
Update to V3.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109760897/ - BehobenSENTRON PAC3200siemens_psirt
Update to V2.4.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/31674577/ - BehobenSENTRON PAC3200Tsiemens_psirt
Update to V3.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793060/ - BehobenSENTRON PAC3220siemens_psirt
Update to V3.2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780938/ - BehobenSENTRON PAC4200siemens_psirt
Update to V2.3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/35029840/ - BehobenFNETcisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://yanzi.dev/#/security/advisories/2020-12-08 - BehobenNut/Netcisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://yanzi.dev/#/security/advisories/2020-12-08 - Behobenopen-iscsicisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://yanzi.dev/#/security/advisories/2020-12-08 - BehobenpicoTCP (EOL)cisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://yanzi.dev/#/security/advisories/2020-12-08 - BehobenpicoTCP-NGcisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://yanzi.dev/#/security/advisories/2020-12-08 - BehobenuIP (EOL)cisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://yanzi.dev/#/security/advisories/2020-12-08 - BehobenuIP-Contiki-NGcisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://yanzi.dev/#/security/advisories/2020-12-08 - BehobenuIP-Contiki-OS (end-of-life [EOL])cisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://yanzi.dev/#/security/advisories/2020-12-08 - BehobenSENTRON 3VA COM100/800cisa_csaf_ot
Update to V4.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109765343/ - BehobenSENTRON 3VA DSP800cisa_csaf_ot
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799046/ - BehobenSENTRON PAC2200 (with MID Approval)cisa_csaf_ot
MID-certified devices do not support firmware updates; V3.2.2 is contained in devices that are labeled as "M22 MID"
- BehobenSENTRON PAC2200 (without MID Approval)cisa_csaf_ot
Update to V3.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109760897/ - BehobenSENTRON PAC3200cisa_csaf_ot
Update to V2.4.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/31674577/ - BehobenSENTRON PAC3200Tcisa_csaf_ot
Update to V3.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793060/ - BehobenSENTRON PAC3220cisa_csaf_ot
Update to V3.2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780938/ - BehobenSENTRON PAC4200cisa_csaf_ot
Update to V2.3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/35029840/ - MitigationSENTRON 3VA COM100/800siemens_psirt
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON 3VA DSP800siemens_psirt
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC2200 (with CLP Approval)siemens_psirt
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC2200 (with MID Approval)siemens_psirt
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC2200 (without MID Approval)siemens_psirt
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC3200siemens_psirt
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC3200Tsiemens_psirt
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC3220siemens_psirt
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC4200siemens_psirt
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON 3VA COM100/800cisa_csaf_ot
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON 3VA DSP800cisa_csaf_ot
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC2200 (with CLP Approval)cisa_csaf_ot
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC2200 (with MID Approval)cisa_csaf_ot
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC2200 (without MID Approval)cisa_csaf_ot
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC3200cisa_csaf_ot
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC3200Tcisa_csaf_ot
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC3220cisa_csaf_ot
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC4200cisa_csaf_ot
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- Kein Fix geplantSENTRON PAC2200 (with CLP Approval)siemens_psirt
Currently no remediation is planned
- Kein Fix geplantSENTRON PAC2200 (with CLP Approval)cisa_csaf_ot
Currently no remediation is planned
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.4–8.2
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (56)
Betroffene Produkte und Versionsbereiche.
- Unify OpenScape Common Management Platformalle Versionencert_bundDEcpe:/a:unify:openscape_common_management_platform:-
Advisories (4)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-541018SSA-541018: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SENTRON PAC / 3VA Devices (Part 2)2021-03-09csaf · siemens_psirtDE
Security researchers discovered and disclosed 33 vulnerabilities in several open-source TCP/IP stacks for embedded devices, also known as "AMNESIA:33" vulnerabilities. This advisory describes the impact of two of these vulnerabilities (CVE-2020-13987, CVE-2020-17437) to Siemens products. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not available. The impact of another "AMNESIA:33" vulnerability (CVE-2020-13988) is described in Siemens Security Advisory SSA-541017.
- WID-SEC-W-2022-1044TCP/IP Stack: Mehrere SchwachstellenDeutsch2020-12-08csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in TCP/IP Stack ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, einen Denial of Service Angriff durchzuführen, vertrauliche Daten einzusehen oder Daten zu manipulieren.
- ICSA-20-343-01Multiple Embedded TCP/IP Stacks2020-12-08icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow attackers to corrupt memory, put devices into infinite loops, access unauthorized data, and/or poison DNS cache.
- ICSA-21-068-06Siemens TCP/IP Stack Vulnerabilities-AMNESIA:33 in SENTRON PAC / 3VA Devices (Update C)2021-03-09icsa · cisa_csaf_otUS
Security researchers discovered and disclosed 33 vulnerabilities in several open-source TCP/IP stacks for embedded devices, also known as "AMNESIA:33" vulnerabilities. This advisory describes the impact of two of these vulnerabilities (CVE-2020-13987, CVE-2020-17437) to Siemens products. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not available. The impact of another "AMNESIA:33" vulnerability (CVE-2020-13988) is described in Siemens Security Advisory SSA-541017.
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (18)
Externe Belege — Patches, Meldungen, Analysen.
- https://cert-portal.siemens.com/productcert/pdf/ssa-541018.pdfcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-17437cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-21-068-06cnnvd
- https://vigilance.fr/vulnerability/uIP-out-of-bounds-memory-reading-via-uip-process-34721cnnvd
- https://www.auscert.org.au/bulletins/ESB-2020.4363/cnnvd
- https://www.auscert.org.au/bulletins/ESB-2021.0767cnnvd
- https://www.auscert.org.au/bulletins/ESB-2021.1235cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan