{"id":"CVE-2020-13987","details":"An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.","modified":"2026-08-07T11:48:23.085763475Z","published":"2020-12-11T22:15:12.543Z","related":["SUSE-RU-2021:1517-1","SUSE-SU-2021:0663-1","SUSE-SU-2021:1164-1","SUSE-SU-2022:2806-1"],"database_specific":{"unresolved_ranges":[{"extracted_events":[{"fixed":"4.4.1"}],"source":"CPE_RANGE","vendor_product":"siemens:sentron_3va_com100_firmware","cpes":["cpe:2.3:o:siemens:sentron_3va_com100_firmware:*:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:o:siemens:sentron_3va_com800_firmware:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"4.4.1"}],"source":"CPE_RANGE","vendor_product":"siemens:sentron_3va_com800_firmware"},{"source":"CPE_RANGE","vendor_product":"siemens:sentron_pac3200_firmware","cpes":["cpe:2.3:o:siemens:sentron_pac3200_firmware:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2.4.7"}]},{"vendor_product":"siemens:sentron_pac4200_firmware","cpes":["cpe:2.3:o:siemens:sentron_pac4200_firmware:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2.3.0"}],"source":"CPE_RANGE"}]},"references":[{"type":"ADVISORY","url":"https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01"},{"type":"ADVISORY","url":"https://www.kb.cert.org/vuls/id/815128"},{"type":"FIX","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-541018.pdf"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/adamdunkels/uip","events":[{"introduced":"0"},{"last_affected":"a49def743f6e5c7d0c0f2d724f0b8e0c563a4a37"}],"database_specific":{"cpe":"cpe:2.3:a:uip_project:uip:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.0"}],"source":"CPE_RANGE"}}],"versions":["uip-1-0","uip-0-9","uip-0-6","uip-0-5"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13987.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/open-iscsi/open-iscsi","events":[{"introduced":"0"},{"last_affected":"7e00642c40123e0b3f949e74c3945872c17a407e"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"2.1.12"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:open-iscsi_project:open-iscsi:*:*:*:*:*:*:*:*"}}],"versions":["2.1.12","2.1.11","2.1.10","2.1.9","2.1.7","2.1.6","2.1.5","2.1.4","2.1.3","2.1.2","2.1.0","2.0.878","2.0.877","2.0.876","2.0.875","2.0.874","2.0.873"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13987.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}