Siemens Sentron 3va COM100 Firmware vulnerabilities

2 CVEs affecting Siemens Sentron 3va COM100 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-17437, published 2020-12-11.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-13987, published 2020-12-11. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in…
• CVE-2020-17437, published 2020-12-11. High severity, CVSS 8.2. EPSS: 2.8% chance of exploitation in the next 30 days. An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts…