CVE-2020-6994
highPriorität · verfolgen · 40EPSS 0.016 · 76. PerzentilEURUUSEPSS · bewertet 2026-10-27
A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS. The vulnerability is due to improper parsing of URL arguments. An attacker could exploit this vulnerability by specially crafting HTTP requests to overflow an internal buffer. The following devices using HiOS Version 07.0.02 and lower are affected: RSP, RSPE, RSPS, RSPL, MSP, EES, EES, EESX, GRS, OS, RED. The following devices using HiSecOS Version 03.2.00 and lower are affected: EAGLE20/30.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationEAGLE20/30cisa_csaf_ot
Hirschmann also recommends, as a workaround, users either use the “IP Access Restriction” feature to restrict HTTP and HTTPS to trusted IP addresses, or disable the HTTP and HTTPS server.
- MitigationRSP RSPE RSPS RSPL MSP EES EES EESX GRS OS REDcisa_csaf_ot
Hirschmann also recommends, as a workaround, users either use the “IP Access Restriction” feature to restrict HTTP and HTTPS to trusted IP addresses, or disable the HTTP and HTTPS server.
- MitigationHitachi Energy AFF660 FWcisa_csaf_ot
Disable the HTTP and HTTPS server.
- MitigationHitachi Energy AFF665 FWcisa_csaf_ot
Disable the HTTP and HTTPS server.
- MitigationAFS660/AFS665cisa_csaf_ot
Hitachi Energy recommends users update to 7.1.05 or later or apply mitigation strategies.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 7.5–9.8
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (14)
Betroffene Produkte und Versionsbereiche.
Advisories (3)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-20-091-01Hirschmann Automation and Control HiOS and HiSecOS Products2020-03-31icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow an unauthenticated, remote attacker to overflow a buffer and fully compromise the device.
- ICSA-22-263-02Hitachi Energy AFF660/665 Series2022-09-20icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could overflow a buffer on the device and fully compromise it.
- ICSA-22-270-01Hitachi Energy AFS660/AFS6652022-09-27icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow an attacker to overflow an internal buffer and fully compromise the target device.
auch bekannt als (5)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (9)
Externe Belege — Patches, Meldungen, Analysen.
- https://nvd.nist.gov/vuln/detail/CVE-2020-6994cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-22-263-02cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-22-270-01cnnvd
- https://www.auscert.org.au/bulletins/ESB-2022.4662cnnvd
- https://www.auscert.org.au/bulletins/ESB-2022.4802cnnvd
- https://www.belden.com/hubfs/support/security/bulletins/Belden_Security_Bulletin_BSECV-2020-01_1v2_FINAL.pdfPatchcnnvd
- https://www.us-cert.gov/ics/advisories/icsa-20-091-01cnnvd
- https://www.us-cert.gov/ics/advisories/icsa-20-091-01enisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan