CVE-2020-25241

2021-03-1517:03:30

CWE-1285

siemens

www.cve.org

simatic mv400

tcp stack

sequence number

tcp rst packages

arbitrary tcp sessions

EPSS

0.001

Percentile

42.5%

JSON

A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does not correctly validate the sequence number for incoming TCP RST packages. An attacker could exploit this to terminate arbitrary TCP sessions.

CNA Affected

[
  {
    "product": "SIMATIC MV400 family",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions <  V7.0.6"
      }
    ]
  }
]

References

cert-portal.siemens.com/productcert/pdf/ssa-599268.pdf

EPSS

0.001

Percentile

42.5%

JSON

Related for CVELIST:CVE-2020-25241