SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2020-12739

A denial-of-service vulnerability in the Fanuc i Series CNC (0i-MD and 0i Mate-MD) could allow an unauthenticated, remote attacker to cause an affected CNC to become inaccessible to other devices.

MEDIUM 5.3EPSS 1.95%

Does this matter?

Lower severity and a low EPSS score (1.95%). Track it; it rarely justifies an emergency change on its own.

Description

A denial-of-service vulnerability in the Fanuc i Series CNC (0i-MD and 0i Mate-MD) could allow an unauthenticated, remote attacker to cause an affected CNC to become inaccessible to other devices.

CVSS 3.1
5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS
1.95% probability · 79th percentile
CISA KEV
Not listed
Weakness
CWE-400
Affected
fanuc/series 30i firmware · fanuc/series 31i firmware · fanuc/series 32i-b plus firmware · fanuc/series 35i-b firmware · fanuc/power motion i-model a firmware · fanuc/series 0i-model f plus firmware · fanuc/series 0i-model f firmware · fanuc/series 32i-model a firmware · fanuc/series 0i-model d firmware · fanuc/series 0i-mate d firmware · fanuc/series 0i-model c firmware · fanuc/series 16i firmware · fanuc/series 18i firmware · fanuc/series 21i-model b firmware · fanuc/series 0i-model b firmware · fanuc/series 18i-wb firmware
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.