PT-2022-8582 · Fieldcomm · Hart-Ip

Reid Wightman · Published 2022-05-19 · Updated 2022-06-02 · CVE-2020-16209

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fieldcomm Group HART-IP version 1.0.0.0

Description A malicious attacker could exploit the interface by constructing messages with sufficiently large payloads to overflow the internal buffer and crash the device, or obtain control of the device.

Recommendations For Fieldcomm Group HART-IP version 1.0.0.0, consider implementing input validation to restrict the size of message payloads as a temporary workaround until a patch is available. Restrict access to the device's interface to minimize the risk of exploitation.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2020-16209

Affected Products

Hart-Ip

References · 4

• https://osv.dev/vulnerability/CVE-2020-16209 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-16209 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-20-287-04 · Note
• https://t.me/cibsecurity/42996 · Telegram Post