CVE-2020-11645 : What You Need to Know

A denial of service vulnerability in B&R GateManager versions allows authenticated users to limit availability of instances.

Understanding CVE-2020-11645

A denial of service vulnerability impacting B&R GateManager versions.

What is CVE-2020-11645?

This CVE describes a denial of service vulnerability in B&R GateManager versions 4260, 9250 (<9.0.20262), and 8250 (<9.2.620236042).

The Impact of CVE-2020-11645

CVSS Base Score: 6.5 (Medium)
Attack Vector: Network
Availability Impact: High
Attack Complexity: Low
Authenticated users can restrict GateManager availability.

Technical Details of CVE-2020-11645

Details on the vulnerability and affected systems.

Vulnerability Description

Vulnerability Type: Denial of Service
Allows authenticated users to limit GateManager availability.

Affected Systems and Versions

GateManager 4260, 9250 (<9.0.20262)
GateManager 8250 (<9.2.620236042)

Exploitation Mechanism

Authenticated users can exploit the vulnerability to disrupt GateManager instances.

Mitigation and Prevention

Steps to mitigate and prevent exploitation of CVE-2020-11645.

Immediate Steps to Take

Update GateManager to versions above the specified vulnerable versions.
Monitor network traffic for any suspicious activity.

Long-Term Security Practices

Regularly update software and apply security patches.
Implement network segmentation to limit the impact of potential attacks.

Patching and Updates

Apply vendor-provided patches promptly to address the vulnerability.