CVE-2020-25195CWE-20

The length of the input fields of Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules are verified only on the client side when receiving input…

published December 15, 2020

CVSS
—
EPSS
1%
Percentile
73.6
In the wild
Unconfirmed
What it is

The length of the input fields of Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules are verified only on the client side when receiving input from the configuration web server, which may allow an attacker to bypass the check and send input to crash the device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01472 · 73.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-12-15T19:38Z
EPSS history
Timeline
  • 15 DEC 19:38Z
    The length of the input fields of Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules are verified only on the client side when receiving input…
    cvelistv5