CVE-2020-15783

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
siemensCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 37%
VendorProductVersion
siemenssinumerik_840d_sl_firmware
*
siemenssimatic_s7-300_cpu_312_firmware
*
siemenssimatic_s7-300_cpu_314_firmware
*
siemenssimatic_s7-300_cpu_315-2_dp_firmware
*
siemenssimatic_s7-300_cpu_315-2_pn_firmware
*
siemenssimatic_s7-300_cpu_317-2_pn_firmware
*
siemenssimatic_s7-300_cpu_317-2_dp_firmware
*
siemenssimatic_s7-300_cpu_315f-2_dp_firmware
*
siemenssimatic_s7-300_cpu_315f-2_pn_firmware
*
siemenssimatic_s7-300_cpu_317f-2_pn_firmware
*
siemenssimatic_s7-300_cpu_317f-2_dp_firmware
*
siemenssimatic_tdc_cpu555_firmware
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://cert-portal.siemens.com/productcert/pdf/ssa-492828.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-492828.pdf