CVE-2020-16209

Fieldcomm Group HART-IP and hipserver - Stack-based Buffer Overflow

State: Published
Severity: 9.8 Critical
Published: May 19, 2022
Updated: Apr 16, 2025
Reserved: Jul 31, 2020

Description

A malicious attacker could exploit the interface of the Fieldcomm Group HART-IP (release 1.0.0.0) by constructing messages with sufficiently large payloads to overflow the internal buffer and crash the device, or obtain control of the device.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	icscert

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
HART-IP Developer KitFieldcomm Group	All 1.0.0.0Affected
hipserverFieldcomm Group	All 3.6.1Affected

References

https://www.cisa.gov/uscert/ics/advisories/icsa-20-287-04

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.