« Volver al listado

CVE-2020-14483

Estado: ModificadaMedia (4.3)—

A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart of Niagara (Versions 4.6.96.28, 4.7.109.20, 4.7.110.32, 4.8.0.110) and Niagara Enterprise Security (Versions 2.4.31, 2.4.45, 4.8.0.35) to correct.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Tridium — NiagaraTridium — Niagara Enterprise Security

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-14483",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.3,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.5,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Niagara",
          "versions": [
            {
              "status": "affected",
              "version": "Niagara: Versions 4.6.96.28, 4.7.109.20, 4.7.110.32, 4.8.0.110 and Niagara Enterprise Security: Versions 2.4.31, 2.4.45, 4.8.0.35"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-08-13T15:15:12.377",
  "references": [
    {
      "url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-224-03",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-224-03",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "ics-cert@hq.dhs.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1088"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart of Niagara (Versions 4.6.96.28, 4.7.109.20, 4.7.110.32, 4.8.0.110) and Niagara Enterprise Security (Versions 2.4.31, 2.4.45, 4.8.0.35) to correct."
    },
    {
      "lang": "es",
      "value": "Un tiempo de espera durante un protocolo de enlace TLS puede resultar en que la conexión falle al terminar. Esto puede resultar en un bloqueo del hilo o subproceso de Niagara y requiere un reinicio manual de Niagara (versiones 4.6.96.28, 4.7.109.20, 4.7.110.32, 4.8.0.110) y Niagara Enterprise Security (versiones 2.4.31, 2.4.45, 4.8.0.35 ) parra corregir"
    }
  ],
  "lastModified": "2026-06-17T02:54:50.770",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tridium:niagara:4.6.96.28:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FEE59D43-F845-44C6-80A3-40686FB6B7EA"
            },
            {
              "criteria": "cpe:2.3:a:tridium:niagara:4.7.109.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A698D4D5-FD34-48C3-AEBF-B0806CBAE911"
            },
            {
              "criteria": "cpe:2.3:a:tridium:niagara:4.7.110.32:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "739E2E10-64B0-4E89-AAC8-672D8DFF8125"
            },
            {
              "criteria": "cpe:2.3:a:tridium:niagara:4.8.0.110:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "542AFB62-67B4-41EB-8EAB-E0AE03FB3787"
            },
            {
              "criteria": "cpe:2.3:a:tridium:niagara_enterprise_security:2.4.31:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1041ABDB-833F-4997-A89C-CA62A00C0320"
            },
            {
              "criteria": "cpe:2.3:a:tridium:niagara_enterprise_security:2.4.45:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2EE6A8CE-0337-49FD-AB77-FADB278C29D1"
            },
            {
              "criteria": "cpe:2.3:a:tridium:niagara_enterprise_security:4.8.0.35:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "59DB62B3-981E-4337-A03A-76AB2305681D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}