CVE-2020-24383
mediumPriorität · verfolgen · 38Stack-Kampagne · AMNESIA:33EPSS 0.049 · 92. PerzentilDEEUUSEPSS · bewertet 2026-10-27
An issue was discovered in FNET through 4.6.4. The code for processing resource records in mDNS queries doesn't check for proper '\0' termination of the resource record name string, leading to an out-of-bounds read, and potentially causing information leak or Denial-or-Service.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenFNETcisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://yanzi.dev/#/security/advisories/2020-12-08 - BehobenNut/Netcisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://yanzi.dev/#/security/advisories/2020-12-08 - Behobenopen-iscsicisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://yanzi.dev/#/security/advisories/2020-12-08 - BehobenpicoTCP (EOL)cisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://yanzi.dev/#/security/advisories/2020-12-08 - BehobenpicoTCP-NGcisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://yanzi.dev/#/security/advisories/2020-12-08 - BehobenuIP (EOL)cisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://yanzi.dev/#/security/advisories/2020-12-08 - BehobenuIP-Contiki-NGcisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://yanzi.dev/#/security/advisories/2020-12-08 - BehobenuIP-Contiki-OS (end-of-life [EOL])cisa_csaf_ot
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
https://yanzi.dev/#/security/advisories/2020-12-08
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–critical · 6.4–9.1
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (28)
Betroffene Produkte und Versionsbereiche.
- Unify OpenScape Common Management Platformalle Versionencert_bundDEcpe:/a:unify:openscape_common_management_platform:-
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- WID-SEC-W-2022-1044TCP/IP Stack: Mehrere SchwachstellenDeutsch2020-12-08csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in TCP/IP Stack ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, einen Denial of Service Angriff durchzuführen, vertrauliche Daten einzusehen oder Daten zu manipulieren.
- ICSA-20-343-01Multiple Embedded TCP/IP Stacks2020-12-08icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow attackers to corrupt memory, put devices into infinite loops, access unauthorized data, and/or poison DNS cache.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (8)
Externe Belege — Patches, Meldungen, Analysen.
- https://nvd.nist.gov/vuln/detail/CVE-2020-24383cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01cnnvd
- https://www.auscert.org.au/bulletins/ESB-2020.4363/cnnvd
- https://www.kb.cert.org/vuls/id/815128cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01enisa_euvd
- https://www.kb.cert.org/vuls/id/815128enisa_euvd
- https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01Third Party AdvisoryUS Government Resourcenvd
- https://www.kb.cert.org/vuls/id/815128Third Party AdvisoryUS Government Resourcenvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan