VYPR

Simatic Rtu3000c Firmware

by Siemens Foundation

CVEs (2)

  • CVE-2020-36478HigAug 23, 2021
    risk 0.42cvss 7.5epss 0.01

    An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way,…

  • CVE-2020-36475HigAug 23, 2021
    risk 0.42cvss 7.5epss 0.02

    An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs.