vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2020-28400

HIGH
7.5
CVSS Score
Published: July 13, 2021 at 11:02 AM UTC
Updated: June 17, 2026 at 03:10 AM UTC
308 products affected across 2 vendorsScalance XF204 FirmwareScalance S615 FirmwareScalance Xf204-2ba Irt Firmware

Using Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller by Siemens?

Get instant alerts when new vulnerabilities affect Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.5
Exploit prediction
EPSS 2%
SSVC
No known exploit

Description

Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Dk Standard Ethernet Controller Evaluation Kit Firmware· Siemens
95%
All versions
siemens-dk-standard-ethernet-controller-evaluation-kit (same device)
Ek Ertec 200 Evaulation Kit Firmware· Siemens
95%
All versions
siemens-ek-ertec-200-evaulation-kit (same device)
Ek Ertec 200P Evaluation Kit Firmware· Siemens
95%
v < 4.7
Affected range stops below 4.7, so it looks safe — our inference, not a vendor statement
siemens-ek-ertec-200p-evaluation-kit (same device)
RUGGEDCOM RM1224 Firmware· Siemens
95%
v < 6.4v < v6.4
Affected range stops below 6.4, so it looks safe — our inference, not a vendor statement
Affected range stops below v6.4, so it looks safe — our inference, not a vendor statement
Scalance M 800 Firmware· Siemens
95%
v < 6.4
Affected range stops below 6.4, so it looks safe — our inference, not a vendor statement
siemens-scalance-m-800 (same device)
Scalance S615 Firmware· Siemens
95%
v < 6.4v < v6.4
Affected range stops below 6.4, so it looks safe — our inference, not a vendor statement
Affected range stops below v6.4, so it looks safe — our inference, not a vendor statement
Scalance W1700 Firmware· Siemens
95%
All versions
siemens-scalance-w1700 (same device)
Scalance W700 Firmware· Siemens
95%
All versions
siemens-scalance-w-700 (same device)
Scalance X200-4p Irt Firmware· Siemens
95%
v < 5.5.0
Affected range stops below 5.5.0, so it looks safe — our inference, not a vendor statement
siemens-scalance-x200-4-p-irt (same device)
Scalance X201-3p Irt Firmware· Siemens
95%
v < 5.5.0
Affected range stops below 5.5.0, so it looks safe — our inference, not a vendor statement
siemens-scalance-x201-3p-irt (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (3)

Source: [email protected]
https://cert-portal.siemens.com/productcert/html/ssa-599968.html
x_refsource_MISCPatchVendor Advisory
Source: [email protected]
https://cert-portal.siemens.com/productcert/pdf/ssa-599968.pdf
x_refsource_MISCThird Party AdvisoryUS Government Resource
Source: [email protected]
https://us-cert.cisa.gov/ics/advisories/icsa-21-194-03

SSVC — Action Prioritization

SSVCNo known exploitAutomatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.5HIGHsiemens
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-770

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card