CVE:CVE-2020-25195
CNNVD:CNNVD-202012-851
Host Engineering Ecom100 Module是美国Host Engineering公司的一个用于工业环境的可编程控制器。该设备可安装DirectSoft软件包用于PLC编程，主站及从站配置支持Modbus/Tcp协议。
Host Engineering ECOM100存在输入验证错误漏洞，该漏洞源于当接收到来自配置web服务器的输入时，仅在客户端对受影响的产品s输入字段的长度进行验证，攻击者可利用该漏洞绕过检查，发送输入导致设备崩溃。
solution:Upgrade hosteng h0-ecom100_firmware to a higher version than 4.0.348,4.1.113,5.0.149,and avoid the version (,4.0.348],(,4.1.113],(,5.0.149]; Upgrade hosteng h2-ecom100_firmware to a higher version than 4.0.2148,5.0.1043,and avoid the version (,4.0.2148],(,5.0.1043]; Upgrade hosteng h4-ecom100_firmware to a higher version than 4.0.2148,and avoid the version (,4.0.2148]