CVE-2020-27632

mediumPriorität · verfolgen · 31OT-Risiko · erhöhtStack-Kampagne · NUMBER:JACKEPSS 0.021 · 82. PerzentilDEEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
2.14% (82nd) EPSS
CVSS 5 · medium
Is it mine?
38 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenCapital VSTARcisa_csaf_ot

    uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.

  • BehobenCycloneTCPcisa_csaf_ot

    uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.

  • BehobenFNETcisa_csaf_ot

    uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.

  • BehobenMPLAB Netcisa_csaf_ot

    uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.

  • BehobenNDKTCPIPcisa_csaf_ot

    uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.

  • BehobenNucleus NET Allcisa_csaf_ot

    uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.

  • BehobenNucleus ReadyStart for ARM MIPS and PPCcisa_csaf_ot

    uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.

  • BehobenNucleus Source Codecisa_csaf_ot

    uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.

  • BehobenNut/Netcisa_csaf_ot

    uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.

  • BehobenpicoTCP (EOL)cisa_csaf_ot

    uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.

  • BehobenpicoTCP-NGcisa_csaf_ot

    uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.

  • BehobenuC/TCP-IP (EOL)cisa_csaf_ot

    uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.

  • BehobenuIP (EOL)cisa_csaf_ot

    uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.

  • BehobenuIP-Contiki-NGcisa_csaf_ot

    uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.

  • BehobenuIP-Contiki-OS (end-of-life [EOL])cisa_csaf_ot

    uIP-Contiki-NG has a patch in progress. See general recommendations below until a patch is made available.

  • BehobenSIMATIC MV400 familycisa_csaf_ot

    Update to V7.0.6

  • MitigationCapital VSTARcisa_csaf_ot

    Nut/Net has a patch in progress. See general recommendations below until a patch is made available.

  • MitigationCycloneTCPcisa_csaf_ot

    Nut/Net has a patch in progress. See general recommendations below until a patch is made available.

  • MitigationFNETcisa_csaf_ot

    Nut/Net has a patch in progress. See general recommendations below until a patch is made available.

  • MitigationMPLAB Netcisa_csaf_ot

    Nut/Net has a patch in progress. See general recommendations below until a patch is made available.

  • MitigationNDKTCPIPcisa_csaf_ot

    Nut/Net has a patch in progress. See general recommendations below until a patch is made available.

  • MitigationNucleus NET Allcisa_csaf_ot

    Nut/Net has a patch in progress. See general recommendations below until a patch is made available.

  • MitigationNucleus ReadyStart for ARM MIPS and PPCcisa_csaf_ot

    Nut/Net has a patch in progress. See general recommendations below until a patch is made available.

  • MitigationNucleus Source Codecisa_csaf_ot

    Nut/Net has a patch in progress. See general recommendations below until a patch is made available.

  • MitigationNut/Netcisa_csaf_ot

    Nut/Net has a patch in progress. See general recommendations below until a patch is made available.

  • MitigationpicoTCP (EOL)cisa_csaf_ot

    Nut/Net has a patch in progress. See general recommendations below until a patch is made available.

  • MitigationpicoTCP-NGcisa_csaf_ot

    Nut/Net has a patch in progress. See general recommendations below until a patch is made available.

  • MitigationuC/TCP-IP (EOL)cisa_csaf_ot

    Nut/Net has a patch in progress. See general recommendations below until a patch is made available.

  • MitigationuIP (EOL)cisa_csaf_ot

    Nut/Net has a patch in progress. See general recommendations below until a patch is made available.

  • MitigationuIP-Contiki-NGcisa_csaf_ot

    Nut/Net has a patch in progress. See general recommendations below until a patch is made available.

  • MitigationuIP-Contiki-OS (end-of-life [EOL])cisa_csaf_ot

    Nut/Net has a patch in progress. See general recommendations below until a patch is made available.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:N/I:P/A:Nprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Nprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6
v3.07.5highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · CISA US
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:Csecondary · CISA US
v3.16.5mediumAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Nsecondary · FSTEC (BDU) RU
v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-330USCWE-330US
04

betroffene Produkte (38)

Betroffene Produkte und Versionsbereiche.

20 von 38 angezeigt
05

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

  • WID-SEC-W-2023-1987TCP/IP Stack: Mehrere SchwachstellenDeutsch2021-02-11csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in TCP/IP Stack ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand herbeiführen oder Sicherheitsvorkehrungen umgehen.

  • ICSA-21-042-01Multiple Embedded TCP/IP Stacks (Update B)2021-02-11icsa · cisa_csaf_otUS

    Successful exploitation of weak initial sequence numbers (ISN) can be used to hijack or spoof TCP connections, cause denial-of-service conditions, inject malicious data, or bypass authentication.

  • ICSA-21-068-07Siemens TCP Stack of SIMATIC MV4002021-03-09icsa · cisa_csaf_otUS

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.

06

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducert_bundcisa_csaf_otNVDCVE.orgMITRE
veröffentlicht 2021-03-10geändert 2026-06-17
08

Referenzen (15)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan