What is CVE-2020-25705?

CVE-2020-25705 is a High severity Linux kernel vulnerability with a CVSS score of 7.4 out of 10. CVE-2020-25705 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2020-25705?

CVE-2020-25705 has a CVSS score of 7.4 out of 10, rated High severity. The vector string is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N.

Is there a patch available for CVE-2020-25705?

No patch is currently available for CVE-2020-25705. Monitor the NIST NVD and your Linux distribution's security advisories for updates.

Is CVE-2020-25705 actively exploited?

CVE-2020-25705 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2020-25705

High

A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well on the Linux Based Products (RUGGEDCOM RM1224: All versions between v5.0 and v6.4, SCALANCE M-800: All versions between v5.0 and v6.4, SCALANCE S615: All versions between v5.0 and v6.4, SCALANCE SC-600: All versions prior to v2.1.3, SCALANCE W1750D: v8.3.0.1, v8.6.0, and v8.7.0, SIMATIC Cloud Connect 7: All versions, SIMATIC MV500 Family: All versions, SIMATIC NET CP 1243-1 (incl. SIPLUS variants): Versions 3.1.39 and later, SIMATIC NET CP 1243-7 LTE EU: Version

Package Linux Kernel

Published 2020-11-17

Last modified 2024-11-21

CVSS version 3.1

Patch available

Awaiting data

CVSS 3.1 score

7.4

out of 10

High

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Vector string

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness type

CWE-330

CVE-2020-25705 is classified as CWE-330

See CWE-330 on MITRE CWE for full details on this weakness type.

References

The following references provide additional information about CVE-2020-25705 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.

CISA
https://us-cert.cisa.gov/ics/advisories/icsa-21-131-03

Details

CVE ID CVE-2020-25705

Severity High

CVSS score 7.4 / 10

CVSS version 3.1

Published 2020-11-17

Modified 2024-11-21

KEV No

Patch Awaiting data

Package linux

Frequently asked questions

What is CVE-2020-25705?

CVE-2020-25705 is a High severity Linux kernel vulnerability with a CVSS score of 7.4 out of 10 . CVE-2020-25705 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2020-25705?

CVE-2020-25705 has a CVSS score of 7.4 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N.
Is there a patch available for CVE-2020-25705?

No patch is currently available for CVE-2020-25705. Monitor the NIST NVD and your Linux distribution's security advisories for updates.
Is CVE-2020-25705 actively exploited?

No — CVE-2020-25705 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.