CVE-2020-15783

7.5HIGH

Key Information:

Vendor
Siemens
Status
Simatic S7-300 Cpu Family (incl. Related Et200 Cpus And Siplus Variants)
Simatic Tdc Cpu555
Sinumerik 840d Sl
Vendor
CVE Published:
12 November 2020

Summary

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.

Affected Version(s)

SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) All versions

SIMATIC TDC CPU555 All versions

SINUMERIK 840D sl All versions

References

https://cert-portal.siemens.com/productcert/pdf/ssa-49282...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.