CVE-2020-35683

CVE-2020-35683 is a Denial-of-Service vulnerability in HCC Nichestack 3.0, affecting various Siemens industrial control devices. It arises from unchecked IP payload size values during ICMP checksum computation, leading to out-of-bounds reads. With a CVSS score of 7.5 (HIGH), this vulnerability is network-exploitable with low attack complexity, requiring no user interaction or privileges, and can cause a complete loss of availability. There is no evidence of active exploitation, and public exploit code is unavailable, though it has garnered some community discussion and media coverage.