CVE-2020-7800 Denial of service in n/a

High 8.2 Published 14 Apr 2020 Updated 4 Aug 2024

Attackers can cause the industrial RTU to reboot and lose configuration settings by sending specially crafted TCP packets.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-7800?

CVE-2020-7800 is a high-severity denial of service vulnerability in n/a, published on 14 Apr 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability. The affected product is vulnerable to specially crafted TCP packets, which can cause the device to shut down or reboot and lose configuration settings. This is a different issue than CVE-2019-16879, CVE-2019-20045, CVE-2019-20046, CVE-2020-7801, and CVE-2020-7802.

Weakness: CWE-754

Which versions are affected by CVE-2020-7800?

It affects 1 product.

Products include Mysyngeryss Husky Rtu 6049-E70 Firmware.

How do I fix CVE-2020-7800?

No fix has been published for CVE-2020-7800 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2020-7800 being exploited?

There is no known exploitation of CVE-2020-7800 in the wild and no public exploit code.

Sources

Also known as GHSA-76hp-q38p-jw8r.