CVE-2020-18756

An arbitrary memory access vulnerability in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to read the contents of any variable area.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

1.31% chance of exploitation in the next 30 days, 69th percentile

Published

2021-08-13

Updated

2024-08-04

Proof-of-concept exploits (1)

• Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_read.md

References

• CVE Record
• NVD entry

Related

• CVE-2018-8965
• CVE-2018-8966
• CVE-2018-8967
• CVE-2018-8968
• CVE-2018-8969
• CVE-2020-18753