IM
IronMonkey Threat Research

CVE-2020-35683 HIGH

Published: 2021-08-19 | Last Modified: 2024-11-21 | Status: Modified

Description

An issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the ICMP checksum. When the IP payload size is set to be smaller than the size of the IP header, the ICMP checksum computation function may read out of bounds, causing a Denial-of-Service.

Additional Descriptions (1)

Se ha detectado un problema en HCC Nichestack versión 3.0. El código que analiza los paquetes ICMP se basa en un valor no comprobado del tamaño de la carga útil IP (extraído del encabezado IP) para calcular la suma de comprobación ICMP. Cuando el tamaño de la carga útil IP está configurado para ser más pequeño que el tamaño del encabezado IP, la función de cálculo de la suma de comprobación ICMP puede leer fuera de límites, causando una Denegación de Servicio.

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-125

Affected Products

Vendor Product Version Update Type
hcc-embedded nichestack 3.0 <built-in method update of dict object at 0x7e60bb884d40> Application
siemens 7km9300-0ae02-0aa0_firmware * <built-in method update of dict object at 0x7e60bb884400> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:hcc-embedded:nichestack:3.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:7km9300-0ae02-0aa0_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:7km9300-0ae02-0aa0:-:*:*:*:*:*:*:*

References

Notification
Message here