CVE-2020-27738
published 2021-04-22CVE-2020-27738: A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE…
high7.4CVSS 3.1
AVNACHPRNUINSUCHINAH
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (Versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). The DNS domain name record decompression functionality does not properly validate the pointer offset values. The parsing of malformed responses could result in a read access past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to cause a denial-of-service condition.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| paloalto | pan-os | — | — |
| paloalto | prisma_sd | — | — |
| siemens | apogee_pxc_compact | — | — |
| siemens | apogee_pxc_compact | — | — |
| siemens | apogee_pxc_modular | — | — |
| siemens | apogee_pxc_modular | — | — |
| siemens | nucleus_net | — | — |
| siemens | nucleus_readystart_v3 | < 2017.02.3 | 2017.02.3 |
| siemens | nucleus_readystart_v3 | — | — |
| siemens | nucleus_readystart_v4 | < 4.1.0 | 4.1.0 |
| siemens | nucleus_readystart_v4 | — | — |
| siemens | nucleus_source_code | — | — |
| siemens | simotics_connect_400 | — | — |
| siemens | simotics_connect_400_firmware | < 0.5.0.0 | 0.5.0.0 |
| siemens | talon_tc_compact | — | — |
| siemens | talon_tc_modular | — | — |