CVE-2020-28393
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-28393
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device on the SCALANCE XM-400, XR-500 (All versions prior to v6.4).
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
数值计算不正确
Source: NVD (National Vulnerability Database)
Vulnerability Title
多款 Siemens 设备安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Siemens SCALANCE X-400是德国西门子（Siemens）公司的一个工控设备。提供大量的端口，高传输速率，支持光纤和铜缆以及以太网供电。 多款Siemens设备存在安全漏洞。未经身份验证的远程攻击者可以通过发送特制的OSPF数据包来创建永久的拒绝服务条件。成功利用漏洞需要在受影响的设备上启用OSPF。以下产品及版本受到影响：SCALANCE XM-400 Family: All versions prior to v6.4、SCALANCE XR-500 Family: All versi
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | SCALANCE XM-400, XR-500 | All versions prior to v6.4 | - |
II. Public POCs for CVE-2020-28393
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-28393
请登录查看更多情报信息。
- Siemens SCALANCE XM-400 and XR-500 Devices | CISAx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2020-28393
Same Patch Batch · n/a · 2021-05-12 · 22 CVEs total
| CVE-2020-23790 | Golo Laravel theme 代码问题漏洞 | |
| CVE-2020-35198 | Wind River VxWorks 输入验证错误漏洞 | |
| CVE-2020-13873 | Codoforum SQL注入漏洞 | |
| CVE-2021-31341 | Siemens Mendix 安全漏洞 | |
| CVE-2021-20277 | Samba 缓冲区错误漏洞 | |
| CVE-2020-27840 | Samba 缓冲区错误漏洞 | |
| CVE-2021-3457 | Foreman 安全漏洞 | |
| CVE-2021-20202 | keycloak 安全漏洞 | |
| CVE-2021-32608 | Smartstore SmartStoreNET 安全漏洞 | |
| CVE-2021-32607 | Smartstore SmartStoreNET 安全漏洞 | |
| CVE-2021-32611 | Antisip eXosip 代码问题漏洞 | |
| CVE-2021-22155 | Blackberry Workspaces Server 安全漏洞 | |
| CVE-2021-32572 | Speco Technologies Speco Web Viewer 路径遍历漏洞 | |
| CVE-2021-30211 | Knowage 跨站脚本漏洞 | |
| CVE-2021-30212 | Knowage 跨站脚本漏洞 | |
| CVE-2021-30214 | Knowage 注入漏洞 | |
| CVE-2021-30213 | Knowage 跨站脚本漏洞 | |
| CVE-2020-19274 | DhCms 跨站脚本漏洞 | |
| CVE-2020-19275 | DhCms 输入验证错误漏洞 | |
| CVE-2020-18165 | LAOBANCMS 跨站脚本漏洞 |
Showing top 20 of 22 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
Same weakness: CWE-682
- CVE-2026-44498
ZEBRA: Block Validator Undercounts Coinbase and P2SH Sigops - CVE-2026-1229
Incorrect calculation in CIRCL secp384r1 CombinedMult - CVE-2026-24783
soroban-fixed-point-math has Incorrect Rounding and Overflow - CVE-2026-21911
Junos OS Evolved: Flapping management interface causes MAC l - CVE-2025-59047
matrix-sdk-base has panic in the `RoomMember::normalized_pow
V. Comments for CVE-2020-28393
No comments yet