[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2020-14405":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":26,"cwes":27,"cpes":29,"technologies":50,"references":66,"score":73,"epss_score":74,"epss_percentile":75,"is_kev":76,"cisa_kev_date_added":77,"cisa_kev_due_date":77,"cisa_ssvc":78,"attack_mappings":84,"exploits":137},268466,"CVE-2020-14405","EUVD-2020-6544","An issue was discovered in LibVNCServer before 0.9.13. libvncclient\u002Frfbproto.c does not limit TextChat size.","2020-06-17T16:15:00Z",{"cvss_v2.0":10,"cvss_v3.1":19},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":18,"confidentialityImpact":16},"2.0",4,"NETWORK","AV:N\u002FAC:L\u002FAu:S\u002FC:N\u002FI:N\u002FA:P","SINGLE","NONE","LOW","PARTIAL",{"scope":20,"version":21,"baseScore":22,"attackVector":13,"baseSeverity":23,"vectorString":24,"integrityImpact":16,"userInteraction":16,"attackComplexity":17,"availabilityImpact":25,"privilegesRequired":17,"confidentialityImpact":16},"UNCHANGED","3.1",6.5,"MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","HIGH",true,[28],"CWE-770",[30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49],"cpe:2.3:o:siemens:simatic_itc1900_firmware:*:*:*:*:*:*:*:*","cpe:2.3:a:libvnc_project:libvncserver:*:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","cpe:2.3:o:siemens:simatic_itc1500_firmware:*:*:*:*:*:*:*:*","cpe:2.3:h:siemens:simatic_itc2200:-:*:*:*:*:*:*:*","cpe:2.3:h:siemens:simatic_itc1500:-:*:*:*:*:*:*:*","cpe:2.3:h:siemens:simatic_itc1900_pro:-:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe:2.3:o:siemens:simatic_itc1500_pro_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:siemens:simatic_itc2200_pro_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","cpe:2.3:h:siemens:simatic_itc1500_pro:-:*:*:*:*:*:*:*","cpe:2.3:h:siemens:simatic_itc2200_pro:-:*:*:*:*:*:*:*","cpe:2.3:h:siemens:simatic_itc1900:-:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","cpe:2.3:o:siemens:simatic_itc2200_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:siemens:simatic_itc1900_pro_firmware:*:*:*:*:*:*:*:*",[51,52,53,54,55,56,57,58,59,60,61,62,63,64,65],"Siemens Simatic Itc1500 Firmware","Siemens Simatic Itc1500 Pro","Siemens Simatic Itc1900 Pro","Siemens Simatic Itc2200 Firmware","Siemens Simatic Itc1900 Pro Firmware","Siemens Simatic Itc1900 Firmware","Siemens Simatic Itc2200","Siemens Simatic Itc1900","Siemens Simatic Itc1500 Pro Firmware","Debian Debian Linux","Siemens Simatic Itc1500","Canonical Ubuntu Linux","Libvnc_Project Libvncserver","Siemens Simatic Itc2200 Pro","Siemens Simatic Itc2200 Pro Firmware",[67,68,69,70,71,72],"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-390195.pdf","https:\u002F\u002Fgithub.com\u002FLibVNC\u002Flibvncserver\u002Fcommit\u002F8937203441ee241c4ace85da687b7d6633a12365","https:\u002F\u002Fgithub.com\u002FLibVNC\u002Flibvncserver\u002Fcompare\u002FLibVNCServer-0.9.12...LibVNCServer-0.9.13","https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F06\u002Fmsg00035.html","https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F08\u002Fmsg00045.html","https:\u002F\u002Fusn.ubuntu.com\u002F4434-1\u002F",0.53,0.0187,0.79196,false,null,{"timestamp":77,"automatable":79,"tech_impact":80,"exploitation":81,"cisa_decision":82,"cisa_remediation_timeline":83},"no","partial","none",{},"FSU",[85,91,102,109,115,121,130],{"name":86,"source":87,"tactics":88,"technique_id":90},"Exploit Public-Facing Application","attack_vector",[89],"initial-access","T1190",{"name":92,"source":93,"cwe_ids":94,"tactics":95,"capec_ids":97,"technique_id":101},"Direct Network Flood","capec",[28],[96],"impact",[98,99,100],"CAPEC-125","CAPEC-482","CAPEC-528","T1498.001",{"name":103,"source":93,"cwe_ids":104,"tactics":105,"capec_ids":106,"technique_id":108},"Reflection Amplification",[28],[96],[107],"CAPEC-490","T1498.002",{"name":110,"source":93,"cwe_ids":111,"tactics":112,"capec_ids":113,"technique_id":114},"Endpoint Denial of Service",[28],[96],[98],"T1499",{"name":116,"source":93,"cwe_ids":117,"tactics":118,"capec_ids":119,"technique_id":120},"OS Exhaustion Flood",[28],[96],[99],"T1499.001",{"name":122,"source":93,"cwe_ids":123,"tactics":124,"capec_ids":125,"technique_id":129},"Service Exhaustion Flood",[28],[96],[126,99,127,128,100],"CAPEC-469","CAPEC-488","CAPEC-489","T1499.002",{"name":131,"source":93,"cwe_ids":132,"tactics":133,"capec_ids":134,"technique_id":136},"Application Exhaustion Flood",[28],[96],[135],"CAPEC-130","T1499.003",[]]