CVE-2020-25195

Name of the Vulnerable Software and Affected Versions Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules (affected versions not specified)

Description The issue arises because the length of input fields in the affected modules is verified only on the client side when receiving input from the configuration web server. This may allow an attacker to bypass the check and send input that could crash the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.