CVE-2020-0543

lowPriorität · verfolgen · 22EPSS 0.005 · 45. PerzentilDEEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.54% (45th) EPSS
CVSS 2.1 · low
Is it mine?
822 products
Prüfe deine Angriffsfläche
Who says so?
6 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenSIMATIC Field PG M5siemens_psirt

    Update BIOS to V22.01.08

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC Field PG M6siemens_psirt

    Update BIOS to V26.01.07

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC3000 SMART V2siemens_psirt

    Update BIOS to V1.B or later version

    https://support.industry.siemens.com/cs/cn/en/view/109763408/
  • BehobenSIMATIC IPC427E (incl. SIPLUS variants)siemens_psirt

    Update BIOS to V21.01.14

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC477Esiemens_psirt

    Update BIOS to V21.01.14

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC477E Prosiemens_psirt

    Update BIOS to V21.01.14

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC527Gsiemens_psirt

    Update BIOS to V1.4.0

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC547Gsiemens_psirt

    Update BIOS to R1.28.0

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC627Esiemens_psirt

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC647Esiemens_psirt

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC677Esiemens_psirt

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC847Esiemens_psirt

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC ITP1000siemens_psirt

    Update BIOS to V23.01.08

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC Field PG M5cisa_csaf_ot

    Update BIOS to V22.01.08

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC Field PG M6cisa_csaf_ot

    Update BIOS to V26.01.07

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC3000 SMART V2cisa_csaf_ot

    Update BIOS to V1.B or later version

    https://support.industry.siemens.com/cs/cn/en/view/109763408/
  • BehobenSIMATIC IPC427E (incl. SIPLUS variants)cisa_csaf_ot

    Update BIOS to V21.01.14

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC477Ecisa_csaf_ot

    Update BIOS to V21.01.14

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC477E Procisa_csaf_ot

    Update BIOS to V21.01.14

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC527Gcisa_csaf_ot

    Update BIOS to V1.4.0

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC547Gcisa_csaf_ot

    Update BIOS to R1.28.0

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC627Ecisa_csaf_ot

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC647Ecisa_csaf_ot

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC677Ecisa_csaf_ot

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC IPC847Ecisa_csaf_ot

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • BehobenSIMATIC ITP1000cisa_csaf_ot

    Update BIOS to V23.01.08

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • MitigationSIMATIC Field PG M4siemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC Field PG M5siemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC Field PG M6siemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC3000 SMART V2siemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC347Esiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC427D (incl. SIPLUS variants)siemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC427E (incl. SIPLUS variants)siemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC477Dsiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC477Esiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC477E Prosiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC527Gsiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC547Esiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC547Gsiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC627Dsiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC627Esiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC647Dsiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC647Esiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC677Dsiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC677Esiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC827Dsiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC847Dsiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC847Esiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC ITP1000siemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMOTION P320-4Esiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMOTION P320-4Ssiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC Field PG M4cisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC Field PG M5cisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC Field PG M6cisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC3000 SMART V2cisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC347Ecisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC427D (incl. SIPLUS variants)cisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC427E (incl. SIPLUS variants)cisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC477Dcisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC477Ecisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC477E Procisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC527Gcisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC547Ecisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC547Gcisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC627Dcisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC627Ecisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC647Dcisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC647Ecisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC677Dcisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC677Ecisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC827Dcisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC847Dcisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC847Ecisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC ITP1000cisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMOTION P320-4Ecisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMOTION P320-4Scisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • Kein Fix geplantSIMATIC Field PG M4siemens_psirt

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC347Esiemens_psirt

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC427D (incl. SIPLUS variants)siemens_psirt

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC477Dsiemens_psirt

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC547Esiemens_psirt

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC627Dsiemens_psirt

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC647Dsiemens_psirt

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC677Dsiemens_psirt

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC827Dsiemens_psirt

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC847Dsiemens_psirt

    Currently no remediation is planned

  • Kein Fix geplantSIMOTION P320-4Esiemens_psirt

    Currently no remediation is planned

  • Kein Fix geplantSIMOTION P320-4Ssiemens_psirt

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC Field PG M4cisa_csaf_ot

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC347Ecisa_csaf_ot

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC427D (incl. SIPLUS variants)cisa_csaf_ot

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC477Dcisa_csaf_ot

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC547Ecisa_csaf_ot

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC627Dcisa_csaf_ot

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC647Dcisa_csaf_ot

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC677Dcisa_csaf_ot

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC827Dcisa_csaf_ot

    Currently no remediation is planned

  • Kein Fix geplantSIMATIC IPC847Dcisa_csaf_ot

    Currently no remediation is planned

  • Kein Fix geplantSIMOTION P320-4Ecisa_csaf_ot

    Currently no remediation is planned

  • Kein Fix geplantSIMOTION P320-4Scisa_csaf_ot

    Currently no remediation is planned

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.5
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 2.1–5.5

v2.02.1lowAV:L/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 2.9
v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 3.6
v2.02.1lowAV:L/AC:L/Au:N/C:P/I:N/A:Nsecondary · FSTEC (BDU) RU
v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · CISA US
v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE
v3.15.1mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

04

betroffene Produkte (822)

Betroffene Produkte und Versionsbereiche.

05

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

  • SSA-534763SSA-534763: Special Register Buffer Data Sampling (SRBDS) aka Crosstalk in Industrial Products2020-09-08csaf · siemens_psirtDE

    Security researchers published information on a vulnerability known as Crosstalk (INTEL-SA-00320). This vulnerability affects modern Intel processors to a varying degree. Several Siemens Industrial Products contain processors that are affected by the vulnerability. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

  • WID-SEC-W-2023-0063Juniper Junos Space: Mehrere SchwachstellenDeutsch2022-01-12csaf · cert_bundDE

    Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, beliebigen Code auszuführen und seine Privilegien zu erweitern.

  • ICSA-20-252-07Siemens Industrial Products (Update F)2020-09-08icsa · cisa_csaf_otUS

    Security researchers published information on a vulnerability known as Crosstalk (INTEL-SA-00320). This vulnerability affects modern Intel processors to a varying degree. Several Siemens Industrial Products contain processors that are affected by the vulnerability. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

06

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

09

Referenzen (102)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan