CVE-2020-13530CWE-910

A denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack Group OpENer 2.3 and development commit 8c73bf3

High · published December 11, 2020

CVSS v3.0
7.5
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

A denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A large number of network requests in a small span of time can cause the running program to stop. An attacker can send a sequence of requests to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02088 · 80.4th percentile
Weakness
CWE-910 · Use of Expired File Descriptor
Published
2020-12-11T03:21Z
EPSS history
Timeline
  • 11 DEC 03:21Z
    A denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack Group OpENer 2.3 and development commit 8c73bf3
    cvelistv5