Summary
A heap overflow vulnerability in dhclient of the affected products, which has been published alongside other vulnerabilities as part of NAME:WRECK could allow an attacker to potentially remotely execute code.
Siemens recommends specific countermeasures for products.
Vulnerabilities 1
-
Unscored —CVE-2020-7461 Public exploit
In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and …
Revision history
-
#1
Publication Date
References
-
SSA-288459: Heap Overflow Vulnerability in RFID terminals - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf
-
SSA-288459: Heap Overflow Vulnerability in RFID terminals - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-288459.txt