PatchTheCVECVE-2020-27541: Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1
CVE-2020-27541 is a high-severity flaw (CVSS 7.5) affecting cs-c2shw firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1. AgentGreen service has a bug in parsing broadcast discovery UDP packet. Sending a packet of too small size will lead to an attempt of allocating buffer of negative size. As the result service AgentGreen will be terminated and started again later.
Why this priority
- High severity
- Public exploit reference
- Remotely exploitable, no login, no user action
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 1.1% (top 34%) |
| CISA exploited list | No |
| Weakness | CWE-787 |
| Published | 2021-01-26 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2020-27541?
cs-c2shw firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2020-27541 being exploited?
CVE-2020-27541 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2020-27541 affect?
CVE-2020-27541 affects cs-c2shw firmware. Severity is high (CVSS 7.5). Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1. AgentGreen service has a bug in parsing broadcast discovery UDP packet. Sending a packet of too small size will lead to an attempt of allocating buffer of negative size. As t
How urgent is CVE-2020-27541?
Priority 53/100. High severity; Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2020-27542 MEDIUM 6.8 MITIGATE Rostelecom CS-C2SHW 5.0.082.1 is affected by: Bash command injection
- CVE-2020-27540 CRITICAL 9.8 MITIGATE Bash injection vulnerability and bypass of signature verification in Rostelecom CS-C2SHW 5.0.082.1
- CVE-2020-27539 CRITICAL 9.8 MITIGATE Heap overflow with full parsing of HTTP respose in Rostelecom CS-C2SHW 5.0.082.1