[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqDHmHvAgCqKtOExC8zSFpPcONDXAATXSUBa1wpKltco":3,"g5a-risk:CVE-2020-27009":122},{"success":4,"data":5,"meta":120},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":42,"epssPercentile":25,"epssTimeSeries":43,"severity":44,"affectedProducts":45,"affectedProductsCount":55,"references":56,"referencesCount":55,"weaknesses":65,"weaknessesCount":55,"isActivelyExploited":80,"cisaInfo":25,"otxData":25,"relatedBlogPosts":81,"seoMetadata":82,"configurations":107,"relatedVendorCves":118,"notableEvents":119},"CVE-2020-27009","What is CVE-2020-27009?","A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions \u003C V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions \u003C V2.8.20), APOGEE PXC Modular (BACnet) (All versions \u003C V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions \u003C V2.8.20), Nucleus NET (All versions \u003C V5.2), Nucleus Source Code (Versions including affected DNS modules), TALON TC Compact (BACnet) (All versions \u003C V3.5.5), TALON TC Modular (BACnet) (All versions \u003C V3.5.5). The DNS domain name record decompression functionality does not properly validate the pointer offset values. The parsing of malformed responses could result in a write past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to execute code in the context of the current process or cause a denial-of-service condition.","A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions \u003C V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions \u003C V2.8.20), APOGEE...","2021-04-22T21:15:09.22","2023-08-08T10:15:11.637",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":32,"CVSSMetricV40":25},[16,28],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"productcert@siemens.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[33],{"Source":17,"Type":18,"CVSSData":34,"BaseSeverity":37,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":35,"VectorString":36,"AccessVector":21,"AccessComplexity":37,"Authentication":23,"ConfidentialityImpact":38,"IntegrityImpact":38,"AvailabilityImpact":38,"BaseScore":39,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.07194,[42,42,42,42,42,42,42],"High",[46,51],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"siemens","nucleus_net","*","cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:*",{"vendor":47,"product":52,"version":53,"criteria":54,"vulnerable":4},"nucleus_source_code","-","cpe:2.3:a:siemens:nucleus_source_code:-:*:*:*:*:*:*:*",2,[57,61],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-180579.pdf","Siemens",[],{"url":62,"source":59,"tags":63},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-185699.pdf",[64],"Vendor Advisory",[66,74],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":72,"structure":73},"CWE-823","Use of Out-of-range Pointer Offset","The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.","While a pointer can contain a reference to any arbitrary memory location, a program typically only intends to use the pointer to access limited portions of memory, such as contiguous memory used to access an individual array.\nPrograms may use offsets in order to access fields or sub-elements stored within structured data. The offset might be out-of-range if it comes from an untrusted source, is the result of an incorrect calculation, or occurs because of another error.\nIf an attacker can control or influence the offset so that it points outside of the intended boundaries of the structure, then the attacker may be able to read or write to memory locations that are used elsewhere in the product. As a result, the attack might change the state of the product as accessed through program variables, cause a crash or instable behavior, and possibly lead to code execution.","Incomplete",false,[],{"title":83,"metaDescription":84,"keywords":85,"canonicalUrl":86,"structuredData":87},"What is CVE-2020-27009? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2020-27009, a high severity cyber security vulnerability from 2021. A vulnerability has been identified in APOGEE PXC Compact (...","CVE-2020-27009, CVE-2020-27009 vulnerability, CVE-2020-27009 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, siemens security, nucleus_net vulnerability, nucleus_source_code vulnerability","\u002Fwhat-is\u002Fcve-2020-27009",{"@context":88,"@type":89,"headline":83,"description":84,"datePublished":10,"dateModified":11,"author":90,"publisher":94,"about":98,"mainEntityOfPage":102,"articleSection":105,"keywords":106},"https:\u002F\u002Fschema.org","TechArticle",{"@type":91,"name":92,"url":93},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":91,"name":92,"url":93,"logo":95},{"@type":96,"url":97},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":99,"name":6,"description":100,"additionalType":101},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":103,"@id":104},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2020-27009","Cybersecurity","CVE-2020-27009, CVE-2020-27009 vulnerability, CVE-2020-27009 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[108],{"Operator":25,"Negate":25,"Nodes":109},[110],{"Operator":111,"Negate":25,"CPEMatch":112},"OR",[113,116],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":114,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":115,"VersionEndIncluding":25},"7AA3D291-7974-459E-8629-82EEE9222881","5.2",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":117,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"53A38C64-612A-4BC5-83D5-D3FA1C90E0F7",[],[],{"lastModified":11,"cacheTime":121,"version":35},1793230565017,{"score":123,"band":124,"action":125,"scoredAt":126},49,"Medium","Plan remediation","2026-10-28T06:50:48.285031+00:00"]