CVE-2020-27736 vulnerability in Siemens Products
Published on April 22, 2021
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (Versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). The DNS domain name label parsing functionality does not properly validate the null-terminated name in DNS-responses. The parsing of malformed responses could result in a read past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to cause a denial-of-service condition or leak the read memory.
Weakness Type
Improper Null Termination
The software does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator. Null termination errors frequently occur in two different ways. An off-by-one error could cause a null to be written out of bounds, leading to an overflow. Or, a program could use a strncpy() function call incorrectly, which prevents a null terminator from being added at all. Other scenarios are possible.
Products Associated with CVE-2020-27736
Want to know whenever a new CVE is published for Siemens products? stack.watch will email you.
Affected Versions
Siemens APOGEE PXC Compact (BACnet):- Version All versions < V3.5.5 is affected.
- Version All versions < V2.8.20 is affected.
- Version All versions < V3.5.5 is affected.
- Version All versions < V2.8.20 is affected.
- Version All versions is affected.
- Version All versions < V2017.02.3 is affected.
- Version All versions < V4.1.0 is affected.
- Version Versions including affected DNS modules is affected.
- Version All versions < V0.5.0.0 is affected.
- Version All versions < V3.5.5 is affected.
- Version All versions < V3.5.5 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.