CVE-2020-16209 CRITICAL

CVE-2020-16209: Fieldcomm Group HART-IP and hipserver - Stack-based Buffer Overflow

Vendor Fieldcomm Group
Product HART-IP Developer Kit
Weakness CWE-121
Published May 19, 2022
Last update April 16, 2025
View on NVD All CVEs

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A malicious attacker could exploit the interface of the Fieldcomm Group HART-IP (release 1.0.0.0) by constructing messages with sufficiently large payloads to overflow the internal buffer and crash the device, or obtain control of the device.

Key dates

02Disclosure timeline

May 19, 2022 CVE published
April 16, 2025 Record updated