CVE:CVE-2020-36475
CNNVD:CNNVD-202108-1843
ARM mbed TLS是英国ARM公司的一款为mbed产品提供安全通讯和加密功能的产品。
ARM mbed TLS 2.25.0之前版本存在安全漏洞，该漏洞源于mbedtls_mpi_exp_mod执行的计算不受限制。因此，提供过大的参数可能导致在生成Diffie-Hellman密钥对时发生拒绝服务。
solution:Upgrade arm mbed_tls to a higher version than 2.7.18,2.16.9,2.25.0,and avoid the version (,2.7.18),[2.8.0,2.16.9),[2.17.0,2.25.0); Upgrade siemens logo!_cmr2020_firmware to a higher version than 2.2,and avoid the version (,2.2); Upgrade siemens logo!_cmr2040_firmware to a higher version than 2.2,and avoid the version (,2.2); Upgrade siemens simatic_rtu3031c_firmware to a higher version than *; Upgrade siemens simatic_rtu3041c_firmware to a higher version than *; Upgrade siemens simatic_rtu3030c_firmware to a higher version than *; Upgrade siemens simatic_rtu3000c_firmware to a higher version than *; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0