Login Request a demo
High severity · published Nov 12, 2020
CVE-2020-15783
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl
7.5
CVSS
1.7%
EPSS
No
On KEV
Description
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Simatic S7-300 Cpu 312 Firmware · Siemens
All versions, or not specified · source: NVD
SS
Simatic S7-300 Cpu 314 Firmware · Siemens
All versions, or not specified · source: NVD
SS
Simatic S7-300 Cpu 315-2 DP Firmware · Siemens
All versions, or not specified · source: NVD
SS
Simatic S7-300 Cpu 315-2 PN Firmware · Siemens
All versions, or not specified · source: NVD
SS
Simatic S7-300 Cpu 315f-2 DP Firmware · Siemens
All versions, or not specified · source: NVD
SS
Simatic S7-300 Cpu 315f-2 PN Firmware · Siemens
All versions, or not specified · source: NVD
SS
Simatic S7-300 Cpu 317-2 DP Firmware · Siemens
All versions, or not specified · source: NVD
SS
Simatic S7-300 Cpu 317-2 PN Firmware · Siemens
All versions, or not specified · source: NVD
SS
Simatic S7-300 Cpu 317f-2 DP Firmware · Siemens
All versions, or not specified · source: NVD
SS
Simatic S7-300 Cpu 317f-2 PN Firmware · Siemens
All versions, or not specified · source: NVD
ST
Simatic Tdc Cpu555 Firmware · Siemens
All versions, or not specified · source: NVD
S8
Sinumerik 840d SL Firmware · Siemens
All versions, or not specified · source: NVD
Affected product
SS
Simatic S7-300 Cpu 312 Firmware
Siemens
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-15783
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-15783
Mitigation
https://cert-portal.siemens.com/productcert/pdf/ssa-492828.pdf
More from Simatic S7-300 Cpu 312 Firmware
6.5
CVE-2020-15791
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl