CVE-2020-15783

Summary

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.

Affected Software

VendorProductVersion RangeStatus
SiemensSIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)All versionsaffected
SiemensSIMATIC TDC CPU555All versionsaffected
SiemensSINUMERIK 840D slAll versionsaffected

Weaknesses

  • CWE-400: CWE-400: Uncontrolled Resource Consumption

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References