Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller (Update A)
A vulnerability in S7-300 might allow an attacker to cause a Denial- of-Service condition on port 102 of the affected devices by sending specially crafted packets. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-15783US | high7.5 | — | ||
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-492828: Denial-of-Service Vulnerability in SIMATIC S7-300 CPUs and SINUMERIK Controller - CSAF Versionself
- SSA-492828: Denial-of-Service Vulnerability in SIMATIC S7-300 CPUs and SINUMERIK Controller - PDF Versionself
- SSA-492828: Denial-of-Service Vulnerability in SIMATIC S7-300 CPUs and SINUMERIK Controller - TXT Versionself
- ICS Advisory ICSA-20-315-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-315-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (6)
- MitigationSIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Protect network access to port 102/tcp of affected devices.
- MitigationSIMATIC TDC CPU555
Protect network access to port 102/tcp of affected devices.
- MitigationSINUMERIK 840D sl
Protect network access to port 102/tcp of affected devices.
- Kein Fix geplantSIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Currently no fix is planned
- Kein Fix geplantSIMATIC TDC CPU555
Currently no fix is planned
- Kein Fix geplantSINUMERIK 840D sl
Currently no fix is planned
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan