Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-25195
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The length of the input fields of Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules are verified only on the client side when receiving input from the configuration web server, which may allow an attacker to bypass the check and send input to crash the device.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
输入验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Host Engineering Ecom100 Module 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Host Engineering Ecom100 Module是美国Host Engineering公司的一个用于工业环境的可编程控制器。该设备可安装DirectSoft软件包用于PLC编程，主站及从站配置支持Modbus/Tcp协议。 Host Engineering ECOM100存在输入验证错误漏洞，该漏洞源于当接收到来自配置web服务器的输入时，仅在客户端对受影响的产品s输入字段的长度进行验证，攻击者可利用该漏洞绕过检查，发送输入导致设备崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
-Host Engineering H0-ECOM100 Module Hardware Versions 6x and prior with Firmware Versions 4.0.348 and prior -
-Host Engineering H2-ECOM100 Module Hardware Versions 5x and prior with Firmware Versions 4.0.2148 and prior -
-Host Engineering H4-ECOM100 Module Firmware Versions 4.0.2148 and prior -
II. Public POCs for CVE-2020-25195
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2020-25195
Please Login to view more intelligence information
IV. Related Vulnerabilities
Same vendor: n/a
Same weakness: CWE-20
V. Comments for CVE-2020-25195

No comments yet

Leave a comment