What is the CVSS score of CVE-2020-12739?

CVE-2020-12739 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L. EPSS exploitation probability: 1.9%.

Series 30I Firmware CVE-2020-12739

MEDIUM

Uncontrolled Resource Consumption (CWE-400)

2020-08-03 cve@mitre.org

Denial Of Service Series 30I Firmware Series 31I Firmware Series 32I B Plus Firmware Series 35I B Firmware Power Motion I Model A Firmware Series 0I Model F Plus Firmware Series 0I Model F Firmware Series 32I Model A Firmware Series 0I Model D Firmware Series 0I Mate D Firmware Series 0I Model C Firmware Series 16I Firmware Series 18I Firmware Series 21I Model B Firmware Series 0I Model B Firmware Series 18I Wb Firmware

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Lifecycle Timeline

CVE Published

Aug 03, 2020 - 17:15 nvd

MEDIUM 5.3

DescriptionNVD

A denial-of-service vulnerability in the Fanuc i Series CNC (0i-MD and 0i Mate-MD) could allow an unauthenticated, remote attacker to cause an affected CNC to become inaccessible to other devices.

AnalysisAI

A denial-of-service vulnerability in the Fanuc i Series CNC (0i-MD and 0i Mate-MD) could allow an unauthenticated, remote attacker to cause an affected CNC to become inaccessible to other devices. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Uncontrolled Resource Consumption (CWE-400), which allows attackers to cause denial of service by exhausting system resources. A denial-of-service vulnerability in the Fanuc i Series CNC (0i-MD and 0i Mate-MD) could allow an unauthenticated, remote attacker to cause an affected CNC to become inaccessible to other devices. Affected products include: Fanuc Series 30I Firmware, Fanuc Series 31I Firmware, Fanuc Series 32I-B Plus Firmware, Fanuc Series 35I-B Firmware, Fanuc Power Motion I-Model A Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement rate limiting, set resource quotas, validate input sizes, use timeouts.