Lucene search

MitreCVE-2020-36475

HistoryAug 23, 2021 - 2:15 a.m.

CVE-2020-36475

2021-08-2302:15:06

CWE-131

mitre

web.nvd.nist.gov

mbed tls

cve-2020-36475

denial of service

diffie-hellman

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

High

EPSS

0.008

Percentile

81.5%

JSON

An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs.

Affected configurations

Nvd

Node

armmbed_tlsRange<2.7.18

armmbed_tlsRange2.8.0–2.16.9

armmbed_tlsRange2.17.0–2.25.0

Node

siemenslogo\!_cmr2020_firmwareRange<2.2

AND

siemenslogo\!_cmr2020Match-

Node

siemenslogo\!_cmr2040_firmwareRange<2.2

AND

siemenslogo\!_cmr2040Match-

Node

siemenssimatic_rtu3031c_firmware

AND

siemenssimatic_rtu3031cMatch-

Node

siemenssimatic_rtu3041c_firmware

AND

siemenssimatic_rtu3041cMatch-

Node

siemenssimatic_rtu3030c_firmware

AND

siemenssimatic_rtu3030cMatch-

Node

siemenssimatic_rtu3000c_firmware

AND

siemenssimatic_rtu3000cMatch-

Node

debiandebian_linuxMatch9.0

debiandebian_linuxMatch10.0

VendorProductVersionCPE
armmbed_tls*cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:*
siemenslogo\!_cmr2020_firmware*cpe:2.3:o:siemens:logo\!_cmr2020_firmware:*:*:*:*:*:*:*:*
siemenslogo\!_cmr2020-cpe:2.3:h:siemens:logo\!_cmr2020:-:*:*:*:*:*:*:*
siemenslogo\!_cmr2040_firmware*cpe:2.3:o:siemens:logo\!_cmr2040_firmware:*:*:*:*:*:*:*:*
siemenslogo\!_cmr2040-cpe:2.3:h:siemens:logo\!_cmr2040:-:*:*:*:*:*:*:*
siemenssimatic_rtu3031c_firmware*cpe:2.3:o:siemens:simatic_rtu3031c_firmware:*:*:*:*:*:*:*:*
siemenssimatic_rtu3031c-cpe:2.3:h:siemens:simatic_rtu3031c:-:*:*:*:*:*:*:*
siemenssimatic_rtu3041c_firmware*cpe:2.3:o:siemens:simatic_rtu3041c_firmware:*:*:*:*:*:*:*:*
siemenssimatic_rtu3041c-cpe:2.3:h:siemens:simatic_rtu3041c:-:*:*:*:*:*:*:*
siemenssimatic_rtu3030c_firmware*cpe:2.3:o:siemens:simatic_rtu3030c_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
arm	mbed_tls	*	cpe:2.3:a:arm:mbed_tls::::::::
siemens	logo\!_cmr2020_firmware	*	cpe:2.3:o:siemens:logo\!_cmr2020_firmware::::::::
siemens	logo\!_cmr2020	-	cpe:2.3:h:siemens:logo\!_cmr2020:-:::::::*
siemens	logo\!_cmr2040_firmware	*	cpe:2.3:o:siemens:logo\!_cmr2040_firmware::::::::
siemens	logo\!_cmr2040	-	cpe:2.3:h:siemens:logo\!_cmr2040:-:::::::*
siemens	simatic_rtu3031c_firmware	*	cpe:2.3:o:siemens:simatic_rtu3031c_firmware::::::::
siemens	simatic_rtu3031c	-	cpe:2.3:h:siemens:simatic_rtu3031c:-:::::::*
siemens	simatic_rtu3041c_firmware	*	cpe:2.3:o:siemens:simatic_rtu3041c_firmware::::::::
siemens	simatic_rtu3041c	-	cpe:2.3:h:siemens:simatic_rtu3041c:-:::::::*
siemens	simatic_rtu3030c_firmware	*	cpe:2.3:o:siemens:simatic_rtu3030c_firmware::::::::