VULNERABILITY INTELLIGENCE

CVE-2020-25195

CVSS score7.5 HIGH
EPSS probability1.47%
CISA KEVNot currently listed
Published2020-12-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

The length of the input fields of Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules are verified only on the client side when receiving input from the configuration web server, which may allow an attacker to bypass the check and send input to crash the device.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-20
  • nvd@nist.gov: CWE-20

Primary references