Denial-of-Service Vulnerability in SIMATIC ET 200SP and S7-1500 Controllers by Siemens

CVE-2020-15796

Summary

A known vulnerability exists in the web server of Siemens SIMATIC ET 200SP Open Controllers and SIMATIC S7-1500 Software Controllers, which could allow remote attackers to execute a denial-of-service attack. By sending a specially crafted HTTP request, attackers can disrupt the normal operation of these products, leading to potential downtime and operational impact. It is crucial for users of these systems to apply necessary patches and updates to mitigate the risk associated with this vulnerability.

References