CVE-2020-7461

highPriorität · verfolgen · 40Stack-Kampagne · NAME:WRECKEPSS 0.041 · 91. PerzentilExploit · PoCDEEURUUS
grimoire priorityP1 · Urgent
Exploitable?
Public exploit
2 exploits · PoC
Likely / severe?
4.13% (91st) EPSS
CVSS 7.5 · high
Is it mine?
17 products
Prüfe deine Angriffsfläche
Who says so?
6 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

  • MitigationSIMATIC RF350Msiemens_psirt

    Use trusted DNS servers in internal network, and restrict DNS traffic to this network only through firewalls.

  • MitigationSIMATIC RF650Msiemens_psirt

    Use trusted DNS servers in internal network, and restrict DNS traffic to this network only through firewalls.

  • MitigationSIMATIC RF350Mcisa_csaf_ot

    Use trusted DNS servers in internal network, and restrict DNS traffic to this network only through firewalls.

  • MitigationSIMATIC RF650Mcisa_csaf_ot

    Use trusted DNS servers in internal network, and restrict DNS traffic to this network only through firewalls.

  • WorkaroundSIMATIC RF350Msiemens_psirt

    Protect network access to affected devices.

  • WorkaroundSIMATIC RF650Msiemens_psirt

    Protect network access to affected devices.

  • WorkaroundSIMATIC RF350Mcisa_csaf_ot

    Protect network access to affected devices.

  • WorkaroundSIMATIC RF650Mcisa_csaf_ot

    Protect network access to affected devices.

  • Kein Fix verfügbarSIMATIC RF350Msiemens_psirt

    Currently no remediation is available

  • Kein Fix verfügbarSIMATIC RF650Msiemens_psirt

    Currently no remediation is available

  • Kein Fix verfügbarSIMATIC RF350Mcisa_csaf_ot

    Currently no remediation is available

  • Kein Fix verfügbarSIMATIC RF650Mcisa_csaf_ot

    Currently no remediation is available

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.9–7.5

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 6.4
v3.17.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Lprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.4
v3.17.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:U/RC:Csecondary · CISA US
v3.17.3highAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Lsecondary · FSTEC (BDU) RU
v3.17.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:U/RC:Csecondary · Siemens ProductCERT DE
v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:Psecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-787USprimärCWE-787USCWE-787USCWE-787US
04

Exploits (2)

Öffentlicher Proof-of-Concept- und Exploit-Code.

05

betroffene Produkte (17)

Betroffene Produkte und Versionsbereiche.

06

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

  • SSA-288459SSA-288459: Heap Overflow Vulnerability in RFID terminals2021-09-14csaf · siemens_psirtDE

    A heap overflow vulnerability in dhclient of the affected products, which has been published alongside other vulnerabilities as part of NAME:WRECK could allow an attacker to potentially remotely execute code. Siemens recommends specific countermeasures for products.

  • ICSA-21-257-11Siemens SIMATIC RFID2021-09-14icsa · cisa_csaf_otUS

    A heap overflow vulnerability in dhclient of the affected products, which has been published alongside other vulnerabilities as part of NAME:WRECK could allow an attacker to potentially remotely execute code. Siemens recommends specific countermeasures for products.

07

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducisa_csaf_otnvdsiemens_psirtNVDCVE.orgMITRE
veröffentlicht 2021-03-26geändert 2026-06-17
10

Referenzen (11)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan