Vulnerability · Published Sep 1, 2020 · Assigned by icscert
CVE-2020-14514Trailer Power Line Communications vulnerability
Medium 4.3
In plain English
A medium-severity security flaw in Trailer Power Line Communications from Multiple Vendors All trailer power line communications are affected.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.5%top 59.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
All trailer Power Line Communications are affected. PLC bus traffic can be sniffed reliably via an active antenna up to 6 feet away. Further distances are also possible, subject to environmental conditions and receiver improvements.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Multiple Vendors All trailer power line communications are affected. | Trailer Power Line Communications | All trailer power line communications are affected. |
Weakness: CWE-201 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
- https://us-cert.cisa.gov/ics/advisories/icsa-20-219-01 x_refsource_MISC