Vulnerability · Published Feb 4, 2021 · Assigned by talos
CVE-2020-6088
High 7.5
In plain English
A high-severity buffer overflow in Allen-Bradley. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.5% (higher than 89% of all known vulnerabilities).
Severity (CVSS 3.0)7.5High
Exploit odds (30 days)3.5%top 10.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Allen-Bradley | Allen-Bradley Flex IO 1794-AENT/B 4.003 |
Weakness: CWE-120 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2020-1008 x_refsource_MISC