Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller (Update A)
A vulnerability in S7-300 might allow an attacker to cause a Denial- of-Service condition on port 102 of the affected devices by sending specially crafted packets. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-15783US | high7.5 | — | ||
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl… | ||||
references
External citations — patches, advisories, analysis.
- SSA-492828: Denial-of-Service Vulnerability in SIMATIC S7-300 CPUs and SINUMERIK Controller - CSAF Versionself
- SSA-492828: Denial-of-Service Vulnerability in SIMATIC S7-300 CPUs and SINUMERIK Controller - PDF Versionself
- SSA-492828: Denial-of-Service Vulnerability in SIMATIC S7-300 CPUs and SINUMERIK Controller - TXT Versionself
- ICS Advisory ICSA-20-315-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-315-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationSIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Protect network access to port 102/tcp of affected devices.
- MitigationSIMATIC TDC CPU555
Protect network access to port 102/tcp of affected devices.
- MitigationSINUMERIK 840D sl
Protect network access to port 102/tcp of affected devices.
- No fix plannedSIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Currently no fix is planned
- No fix plannedSIMATIC TDC CPU555
Currently no fix is planned
- No fix plannedSINUMERIK 840D sl
Currently no fix is planned
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan