CVE-2020-28400

Name: CVE-2020-28400
Creator: NVD / NIST
Published: 2021-07-13T11:15:08.96+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 8.7/10EPSS 1.86%

Last modified Jun 17, 2026

CVE-2020-28400 is a high-severity vulnerability rated 8.7/10 on the CVSS scale. Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.. EPSS estimates a 1.86% chance of exploitation in the next 30 days.

Description

Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.

Metrics

CVSS 3.1

7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS 4.0

8.7/10

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS Probability

1.86%

76.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Siemens	Dk Standard Ethernet Controller Evaluation Kit Firmware	All versions
Siemens	Ek-Ertec 200 Evaulation Kit Firmware	All versions
Siemens	Ek-Ertec 200p Evaluation Kit Firmware	< 4.7
Siemens	Ruggedcom Rm1224 Firmware	< 6.4
Siemens	Scalance M-800 Firmware	< 6.4
Siemens	Scalance S615 Firmware	< 6.4
Siemens	Scalance W700 Firmware	All versions
Siemens	Scalance W1700 Firmware	All versions
Siemens	Scalance X200-4 P Irt Firmware	< 5.5.0
Siemens	Scalance X201-3p Irt Firmware	< 5.5.0
Siemens	Scalance X201-3p Irt Pro Firmware	< 5.5.0
Siemens	Scalance X202-2 Irt Firmware	< 5.5.0
Siemens	Scalance X202-2p Irt Pro Firmware	< 5.5.0
Siemens	Scalance X204 Irt Firmware	< 5.5.0
Siemens	Scalance X204 Irt Pro Firmware	< 5.5.0
Siemens	Scalance X204-2 Firmware	< 5.2.5
Siemens	Scalance X204-2fm Firmware	< 5.2.5
Siemens	Scalance X204-2ld Firmware	< 5.2.5
Siemens	Scalance X204-2ld Ts Firmware	< 5.2.5
Siemens	Scalance X204-2ts Firmware	< 5.2.5
Siemens	Scalance X206-1 Firmware	< 5.2.5
Siemens	Scalance X206-1ld Firmware	< 5.2.5
Siemens	Scalance X208 Firmware	< 5.2.5
Siemens	Scalance X208pro Firmware	< 5.2.5
Siemens	Scalance X212-2 Firmware	< 5.2.5
Siemens	Scalance X212-2ld Firmware	< 5.2.5
Siemens	Scalance X216 Firmware	< 5.2.5
Siemens	Scalance X224 Firmware	< 5.2.5
Siemens	Scalance X302-7eec Firmware	All versions
Siemens	Scalance X304-2fe Firmware	All versions
Siemens	Scalance X306-1ldfe Firmware	All versions
Siemens	Scalance X307-2eec Firmware	All versions
Siemens	Scalance X307-3 Firmware	All versions
Siemens	Scalance X307-3ld Firmware	All versions
Siemens	Scalance X308-2 Firmware	All versions
Siemens	Scalance X308-2ld Firmware	All versions
Siemens	Scalance X308-2lh Firmware	All versions
Siemens	Scalance X308-2lh\+ Firmware	All versions
Siemens	Scalance X308-2m Firmware	All versions
Siemens	Scalance X308-2m Poe Firmware	All versions
Siemens	Scalance X308-2m Ts Firmware	All versions
Siemens	Scalance X310 Firmware	All versions
Siemens	Scalance X310fe Firmware	All versions
Siemens	Scalance X320-1fe Firmware	All versions
Siemens	Scalance X320-3ldfe Firmware	All versions
Siemens	Scalance Xb-200 Firmware	< 4.3
Siemens	Scalance Xc-200 Firmware	< 4.3
Siemens	Scalance Xf201-3p Irt Firmware	< 5.5.0
Siemens	Scalance Xf202-2p Irt Firmware	< 5.5.0
Siemens	Scalance Xf204 Firmware	< 5.2.5

Showing 50 of 79 affected configurations. See NVD for the full list.

References

https://cert-portal.siemens.com/productcert/html/ssa-599968.html
https://cert-portal.siemens.com/productcert/pdf/ssa-599968.pdfPatch, Vendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-194-03Third Party Advisory, US Government Resource
https://cert-portal.siemens.com/productcert/html/ssa-599968.html
https://cert-portal.siemens.com/productcert/pdf/ssa-599968.pdfPatch, Vendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-194-03Third Party Advisory, US Government Resource

Timeline

Published: Jul 13, 2021
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2020-28400?

How severe is CVE-2020-28400?

CVE-2020-28400 has a CVSS score of 8.7/10 (HIGH severity). The EPSS model estimates a 1.86% probability of exploitation in the next 30 days.

How do I fix CVE-2020-28400?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-28400?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST