CVE-2020-15783

CVSS 7.5 HIGHEPSS 1.6%CWE-400

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.5EPSS 1.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 nov 2020Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Produtos afetados

Siemens · SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)Siemens · SIMATIC TDC CPU555 Siemens · SINUMERIK 840D sl

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://cert-portal.siemens.com/productcert/pdf/ssa-492828.pdf