{"id":"CVE-2020-28393","aliases":["EUVD-2020-20852","GHSA-q5c9-w6w2-m4fw"],"status":"published","title":"A vulnerability has been identified in SCALANCE XM-400 Family (All versions \u003c V6.4), SCALANCE XR...","description":"An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device on the SCALANCE XM-400, XR-500 (All versions prior to v6.4).","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01629,"percentile":0.7641,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-682"],"published":"2021-05-12T13:18:22Z","modified":"2026-06-17T03:10:22Z","products":[{"vendor":"siemens","product":"scalance_xm-400_firmware"},{"vendor":"siemens","product":"scalance_xm408-4c_firmware"},{"vendor":"siemens","product":"scalance_xm408-4c_l3_firmware"},{"vendor":"siemens","product":"scalance_xm408-8c_firmware"},{"vendor":"siemens","product":"scalance_xm408-8c_l3_firmware"},{"vendor":"siemens","product":"scalance_xm416-4c_firmware"},{"vendor":"siemens","product":"scalance_xm416-4c_l3_firmware"},{"vendor":"siemens","product":"scalance_xr524_firmware"},{"vendor":"siemens","product":"scalance_xr526_firmware"},{"vendor":"siemens","product":"scalance_xr528_firmware"},{"vendor":"siemens","product":"scalance_xr552_firmware"}],"references":[{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-131-10","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-116379.pdf","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28393"},{"url":"https://github.com/advisories/GHSA-q5c9-w6w2-m4fw"}],"sources":{"cve":[{"id":"CVE-2020-28393","description":"An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device on the SCALANCE XM-400, XR-500 (All versions prior to v6.4).","status":"published","published":"2021-05-12T13:18:22Z","modified":"2024-08-04T16:33:59.094Z","cwes":["CWE-682"],"updated_at":"2026-11-02T14:35:57.017407Z"}],"euvd":[{"id":"EUVD-2020-20852","description":"An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device on the SCALANCE XM-400, XR-500 (All versions prior to v6.4).","status":"published","published":"2021-05-12T13:18:22Z","modified":"2024-08-04T16:33:59Z","updated_at":"2026-11-03T03:07:10.123634Z"}],"ghsa":[{"id":"GHSA-q5c9-w6w2-m4fw","title":"A vulnerability has been identified in SCALANCE XM-400 Family (All versions \u003c V6.4), SCALANCE XR...","description":"A vulnerability has been identified in SCALANCE XM-400 Family (All versions \u003c V6.4), SCALANCE XR-500 Family (All versions \u003c V6.4). The OSPF protocol implementation in affected devices incorrectly handles the number of LSA fields in combination with other modified fields. An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device.","status":"published","published":"2022-05-24T19:02:15Z","modified":"2023-01-29T05:06:41Z","cwes":["CWE-682"],"updated_at":"2026-11-02T14:46:04.961867Z"}],"nvd":[{"id":"CVE-2020-28393","description":"An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device on the SCALANCE XM-400, XR-500 (All versions prior to v6.4).","status":"published","published":"2021-05-12T14:15:11.083Z","modified":"2026-06-17T03:10:22.393Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.1,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-682"],"updated_at":"2026-11-02T14:06:39.25999Z"}]}}