Sign-up

ID

VAR-202001-1978


TITLE

Denial of Service Vulnerability in Sunjet XG1-16T4 PLC

Trust: 0.6

sources: CNVD: CNVD-2020-04095

DESCRIPTION

Wuxi Xinjie Electric Co., Ltd. is a well-known domestic company specializing in the development and application of industrial automation products. There is a denial of service vulnerability in the Sungee XG1-16T4 PLC. An attacker can use the vulnerability to send an excessively long data packet to the port, which will cause the port to deny service and must be powered off and restarted to resume normal work.

Trust: 0.6

sources: CNVD: CNVD-2020-04095

IOT TAXONOMY

category:['IoT', 'ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-04095

AFFECTED PRODUCTS

vendor:wuxi xinjie electricmodel:xg1-16t4scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2020-04095

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2020-04095
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2020-04095
severity: MEDIUM
baseScore: 4.9
vectorString: AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2020-04095

PATCH

title:Denial of Service Vulnerability in Sunjet XG1-16T4 PLCurl:https://www.cnvd.org.cn/patchinfo/show/194509

Trust: 0.6

sources: CNVD: CNVD-2020-04095

EXTERNAL IDS

db:CNVDid:CNVD-2020-04095

Trust: 0.6

sources: CNVD: CNVD-2020-04095

SOURCES

db:CNVDid:CNVD-2020-04095

LAST UPDATE DATE

2022-05-04T08:34:48.022000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-04095date:2020-02-12T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-04095date:2020-01-31T00:00:00