CVE

CVE-2020-28388

Date: (C)2021-02-11   (M)2023-12-22

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), Nucleus NET (All versions < V5.2), Nucleus ReadyStart V3 (All versions < V2012.12), Nucleus Source Code (All versions), PLUSCONTROL 1st Gen (All versions), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). Initial Sequence Numbers (ISNs) for TCP connections are derived from an insufficiently random source. As a result, the ISN of current and future TCP connections could be predictable. An attacker could hijack existing sessions or spoof future ones.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:		CVSS V2 Severity:
CVSS Score : 5.3		CVSS Score : 5.0
Exploit Score: 3.9		Exploit Score: 10.0
Impact Score: 1.4		Impact Score: 2.9
CVSS V3 Metrics:		CVSS V2 Metrics:
Attack Vector: NETWORK		Access Vector: NETWORK
Attack Complexity: LOW		Access Complexity: LOW
Privileges Required: NONE		Authentication: NONE
User Interaction: NONE		Confidentiality: NONE
Scope: UNCHANGED		Integrity: PARTIAL
Confidentiality: NONE		Availability: NONE
Integrity: LOW
Availability: NONE

Reference:

https://cert-portal.siemens.com/productcert/pdf/ssa-180579.pdf

https://cert-portal.siemens.com/productcert/pdf/ssa-344238.pdf

https://cert-portal.siemens.com/productcert/pdf/ssa-362164.pdf

https://cert-portal.siemens.com/productcert/pdf/ssa-436469.pdf