Siemens SIMATIC Controller Web Servers
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-15796US | high7.5 | — | ||
A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500 Software Controller (V20.8). The web server of the affected… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationSIMATIC ET 200SP Open Controller (incl. SIPLUS variants)
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC S7-1500 Software Controller
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
- FixedSIMATIC ET 200SP Open Controller (incl. SIPLUS variants)
If the PC Station web server does not restart automatically Windows reboot is required. This can be done while the control system is running as the PLC control functionality is not affected.
- FixedSIMATIC S7-1500 Software Controller
If the PC Station web server does not restart automatically Windows reboot is required. This can be done while the control system is running as the PLC control functionality is not affected.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan