VulnerabilityModified

CVE-2020-25241

A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6).

HIGH 7.5EPSS 1.03%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.03%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does not correctly validate the sequence number for incoming TCP RST packages. An attacker could exploit this to terminate arbitrary TCP sessions.

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 1.03% probability · 62th percentile
CISA KEV: Not listed
Weakness: CWE-1285, CWE-129
Affected: siemens/simatic mv440 sr firmware · siemens/simatic mv440 hr firmware · siemens/simatic mv440 ur firmware · siemens/simatic mv420 sr-b firmware · siemens/simatic mv420 sr-p firmware · siemens/simatic mv420 sr-b body firmware · siemens/simatic mv420 sr-p body firmware
Source: productcert@siemens.com

References

https://cert-portal.siemens.com/productcert/pdf/ssa-599268.pdfVendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-599268.pdfVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.