CVE-2020-6994
- State
- Published
- Severity
- Not scored
- Published
- Apr 3, 2020
- Updated
- Aug 4, 2024
- Reserved
- Jan 14, 2020
Description
A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS. The vulnerability is due to improper parsing of URL arguments. An attacker could exploit this vulnerability by specially crafting HTTP requests to overflow an internal buffer. The following devices using HiOS Version 07.0.02 and lower are affected: RSP, RSPE, RSPS, RSPL, MSP, EES, EES, EESX, GRS, OS, RED. The following devices using HiSecOS Version 03.2.00 and lower are affected: EAGLE20/30.
Scores
The record has no CVSS score.
Weaknesses
- CWE-12 BUFFER COPY WITHOUT CHECKING SIZE OF INPUT ('CLASSIC BUFFER OVERFLOW') CWE-12
Affected Products
| Product | Versions |
|---|---|
HiOS for the following devices RSP, RSPE, RSPS, RSPL, MSP, EES, EES, EESX, GRS, OS, REDHirschmann Automation and Control GmbH, a division of Belden Inc. |
|
HiSecOS for device EAGLE20/30Hirschmann Automation and Control GmbH, a division of Belden Inc. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.