← Back

CVE-2020-35683

nvd nist
Published: Aug 19, 2021Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

An issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the ICMP checksum. When the IP payload size is set to be smaller than the size of the IP header, the ICMP checksum computation function may read out of bounds, causing a Denial-of-Service.

Affected (2)

Hcc Embedded
1 product
Nichestack
Siemens
1 product
7km9300 0ae02 0aa0 Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Nichestack
Version 3.0
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
7km9300 0ae02 0aa0 Firmware
Before 3.0.4
Running on/withPlatform Versions
Siemens
7km9300 0ae02 0aa0
All versions

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (8)

Source: cve@mitre.org
MitigationThird Party Advisory
Source: cve@mitre.org
MitigationThird Party Advisory
Source: cve@mitre.org
Product
Source: cve@mitre.org
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Product
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.