CVE-2020-15783

CVSS 7.5 HIGHEPSS 1.6%CWE-400

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 7.5EPSS 1.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

12 Nov 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Siemens · SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)Siemens · SIMATIC TDC CPU555 Siemens · SINUMERIK 840D sl

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://cert-portal.siemens.com/productcert/pdf/ssa-492828.pdf