CVE-2020-0543
lowpriority · track · 22EPSS 0.005 · 45 %ileDEEURUUSEPSS · scored 2026-10-27
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedSIMATIC Field PG M5siemens_psirt
Update BIOS to V22.01.08
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC Field PG M6siemens_psirt
Update BIOS to V26.01.07
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC3000 SMART V2siemens_psirt
Update BIOS to V1.B or later version
https://support.industry.siemens.com/cs/cn/en/view/109763408/ - FixedSIMATIC IPC427E (incl. SIPLUS variants)siemens_psirt
Update BIOS to V21.01.14
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC477Esiemens_psirt
Update BIOS to V21.01.14
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC477E Prosiemens_psirt
Update BIOS to V21.01.14
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC527Gsiemens_psirt
Update BIOS to V1.4.0
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC547Gsiemens_psirt
Update BIOS to R1.28.0
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC627Esiemens_psirt
Update BIOS to V25.02.06
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC647Esiemens_psirt
Update BIOS to V25.02.06
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC677Esiemens_psirt
Update BIOS to V25.02.06
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC847Esiemens_psirt
Update BIOS to V25.02.06
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC ITP1000siemens_psirt
Update BIOS to V23.01.08
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC Field PG M5cisa_csaf_ot
Update BIOS to V22.01.08
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC Field PG M6cisa_csaf_ot
Update BIOS to V26.01.07
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC3000 SMART V2cisa_csaf_ot
Update BIOS to V1.B or later version
https://support.industry.siemens.com/cs/cn/en/view/109763408/ - FixedSIMATIC IPC427E (incl. SIPLUS variants)cisa_csaf_ot
Update BIOS to V21.01.14
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC477Ecisa_csaf_ot
Update BIOS to V21.01.14
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC477E Procisa_csaf_ot
Update BIOS to V21.01.14
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC527Gcisa_csaf_ot
Update BIOS to V1.4.0
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC547Gcisa_csaf_ot
Update BIOS to R1.28.0
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC627Ecisa_csaf_ot
Update BIOS to V25.02.06
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC647Ecisa_csaf_ot
Update BIOS to V25.02.06
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC677Ecisa_csaf_ot
Update BIOS to V25.02.06
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC IPC847Ecisa_csaf_ot
Update BIOS to V25.02.06
https://support.industry.siemens.com/cs/ww/en/view/109763408 - FixedSIMATIC ITP1000cisa_csaf_ot
Update BIOS to V23.01.08
https://support.industry.siemens.com/cs/ww/en/view/109763408 - MitigationSIMATIC Field PG M4siemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC Field PG M5siemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC Field PG M6siemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC3000 SMART V2siemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC347Esiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC427D (incl. SIPLUS variants)siemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC427E (incl. SIPLUS variants)siemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC477Dsiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC477Esiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC477E Prosiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC527Gsiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC547Esiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC547Gsiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC627Dsiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC627Esiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC647Dsiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC647Esiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC677Dsiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC677Esiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC827Dsiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC847Dsiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC847Esiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC ITP1000siemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMOTION P320-4Esiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMOTION P320-4Ssiemens_psirt
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC Field PG M4cisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC Field PG M5cisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC Field PG M6cisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC3000 SMART V2cisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC347Ecisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC427D (incl. SIPLUS variants)cisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC427E (incl. SIPLUS variants)cisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC477Dcisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC477Ecisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC477E Procisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC527Gcisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC547Ecisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC547Gcisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC627Dcisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC627Ecisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC647Dcisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC647Ecisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC677Dcisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC677Ecisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC827Dcisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC847Dcisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC847Ecisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC ITP1000cisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMOTION P320-4Ecisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMOTION P320-4Scisa_csaf_ot
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- No fix plannedSIMATIC Field PG M4siemens_psirt
Currently no remediation is planned
- No fix plannedSIMATIC IPC347Esiemens_psirt
Currently no remediation is planned
- No fix plannedSIMATIC IPC427D (incl. SIPLUS variants)siemens_psirt
Currently no remediation is planned
- No fix plannedSIMATIC IPC477Dsiemens_psirt
Currently no remediation is planned
- No fix plannedSIMATIC IPC547Esiemens_psirt
Currently no remediation is planned
- No fix plannedSIMATIC IPC627Dsiemens_psirt
Currently no remediation is planned
- No fix plannedSIMATIC IPC647Dsiemens_psirt
Currently no remediation is planned
- No fix plannedSIMATIC IPC677Dsiemens_psirt
Currently no remediation is planned
- No fix plannedSIMATIC IPC827Dsiemens_psirt
Currently no remediation is planned
- No fix plannedSIMATIC IPC847Dsiemens_psirt
Currently no remediation is planned
- No fix plannedSIMOTION P320-4Esiemens_psirt
Currently no remediation is planned
- No fix plannedSIMOTION P320-4Ssiemens_psirt
Currently no remediation is planned
- No fix plannedSIMATIC Field PG M4cisa_csaf_ot
Currently no remediation is planned
- No fix plannedSIMATIC IPC347Ecisa_csaf_ot
Currently no remediation is planned
- No fix plannedSIMATIC IPC427D (incl. SIPLUS variants)cisa_csaf_ot
Currently no remediation is planned
- No fix plannedSIMATIC IPC477Dcisa_csaf_ot
Currently no remediation is planned
- No fix plannedSIMATIC IPC547Ecisa_csaf_ot
Currently no remediation is planned
- No fix plannedSIMATIC IPC627Dcisa_csaf_ot
Currently no remediation is planned
- No fix plannedSIMATIC IPC647Dcisa_csaf_ot
Currently no remediation is planned
- No fix plannedSIMATIC IPC677Dcisa_csaf_ot
Currently no remediation is planned
- No fix plannedSIMATIC IPC827Dcisa_csaf_ot
Currently no remediation is planned
- No fix plannedSIMATIC IPC847Dcisa_csaf_ot
Currently no remediation is planned
- No fix plannedSIMOTION P320-4Ecisa_csaf_ot
Currently no remediation is planned
- No fix plannedSIMOTION P320-4Scisa_csaf_ot
Currently no remediation is planned
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.1–5.5
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (822)
Products and version ranges known to be affected.
- Juniper Contrail Service Orchestrationall versionscert_bundDEcpe:/a:juniper:contrail_service_orchestration:-
advisories (3)
Vendor and ecosystem advisories describing this.
- SSA-534763SSA-534763: Special Register Buffer Data Sampling (SRBDS) aka Crosstalk in Industrial Products2020-09-08csaf · siemens_psirtDE
Security researchers published information on a vulnerability known as Crosstalk (INTEL-SA-00320). This vulnerability affects modern Intel processors to a varying degree. Several Siemens Industrial Products contain processors that are affected by the vulnerability. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
- WID-SEC-W-2023-0063Juniper Junos Space: Mehrere SchwachstellenDeutsch2022-01-12csaf · cert_bundDE
Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, beliebigen Code auszuführen und seine Privilegien zu erweitern.
- ICSA-20-252-07Siemens Industrial Products (Update F)2020-09-08icsa · cisa_csaf_otUS
Security researchers published information on a vulnerability known as Crosstalk (INTEL-SA-00320). This vulnerability affects modern Intel processors to a varying degree. Several Siemens Industrial Products contain processors that are affected by the vulnerability. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (102)
External citations — patches, advisories, analysis.
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00025.htmlcnnvd
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00024.htmlcnnvd
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00031.htmlcnnvd
- http://www.openwall.com/lists/oss-security/2020/07/14/5cnnvd
- https://access.redhat.com/security/cve/cve-2020-0543cnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-534763.pdfcnnvd
- https://kc.mcafee.com/corporate/index?page=content&id=SB10318cnnvd
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DT2VKDMQ3I37NBNJ256A2EXR7OJHXXKZ/cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan