CVE-2020-6996

2020-04-1518:46:30

CWE-121

icscert

www.cve.org

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

61.6%

JSON

Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are affected:3.16.00 through 3.25.01. A specially crafted message may cause a stack-based buffer overflow. Authentication is not required to exploit this vulnerability.

CNA Affected

[
  {
    "product": "Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are affected:3.16.00 through 3.25.01",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are affected:3.16.00 through 3.25.01"
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/icsa-20-105-02