CVE-2020-28393

Name of the Vulnerable Software and Affected Versions: SCALANCE XM-400 versions prior to v6.4 XR-500 versions prior to v6.4

Description: An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device.

Recommendations: For SCALANCE XM-400 versions prior to v6.4, update to version v6.4 or later to resolve the issue. For XR-500 versions prior to v6.4, update to version v6.4 or later to resolve the issue. As a temporary workaround, consider disabling OSPF on affected devices until a patch is available.