Denial-of-Service Vulnerability in SIMATIC S7-300 and Related Products by Siemens
CVE-2020-15783
7.5HIGH
Key Information:
- Vendor
Siemens
- Status
- Vendor
- CVE Published:
- 12 November 2020
What is CVE-2020-15783?
A design flaw has been detected in the SIMATIC S7-300 CPU family, as well as associated ET200 CPUs and SIPLUS variants, which allows attackers to send multiple specially crafted packets to these devices. This can lead to a Denial-of-Service condition on port 102, resulting in an interruption of service. To restore functionality, a cold restart of the affected devices is required.
Affected Version(s)
SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) All versions
SIMATIC TDC CPU555 All versions
SINUMERIK 840D sl All versions