CVE-2020-0543

lowpriority · track · 22EPSS 0.005 · 45 %ileDEEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.54% (45th) EPSS
CVSS 2.1 · low
Is it mine?
822 products
Check your exposure
Who says so?
6 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedSIMATIC Field PG M5siemens_psirt

    Update BIOS to V22.01.08

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC Field PG M6siemens_psirt

    Update BIOS to V26.01.07

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC3000 SMART V2siemens_psirt

    Update BIOS to V1.B or later version

    https://support.industry.siemens.com/cs/cn/en/view/109763408/
  • FixedSIMATIC IPC427E (incl. SIPLUS variants)siemens_psirt

    Update BIOS to V21.01.14

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC477Esiemens_psirt

    Update BIOS to V21.01.14

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC477E Prosiemens_psirt

    Update BIOS to V21.01.14

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC527Gsiemens_psirt

    Update BIOS to V1.4.0

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC547Gsiemens_psirt

    Update BIOS to R1.28.0

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC627Esiemens_psirt

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC647Esiemens_psirt

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC677Esiemens_psirt

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC847Esiemens_psirt

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC ITP1000siemens_psirt

    Update BIOS to V23.01.08

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC Field PG M5cisa_csaf_ot

    Update BIOS to V22.01.08

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC Field PG M6cisa_csaf_ot

    Update BIOS to V26.01.07

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC3000 SMART V2cisa_csaf_ot

    Update BIOS to V1.B or later version

    https://support.industry.siemens.com/cs/cn/en/view/109763408/
  • FixedSIMATIC IPC427E (incl. SIPLUS variants)cisa_csaf_ot

    Update BIOS to V21.01.14

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC477Ecisa_csaf_ot

    Update BIOS to V21.01.14

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC477E Procisa_csaf_ot

    Update BIOS to V21.01.14

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC527Gcisa_csaf_ot

    Update BIOS to V1.4.0

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC547Gcisa_csaf_ot

    Update BIOS to R1.28.0

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC627Ecisa_csaf_ot

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC647Ecisa_csaf_ot

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC677Ecisa_csaf_ot

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC847Ecisa_csaf_ot

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC ITP1000cisa_csaf_ot

    Update BIOS to V23.01.08

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • MitigationSIMATIC Field PG M4siemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC Field PG M5siemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC Field PG M6siemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC3000 SMART V2siemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC347Esiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC427D (incl. SIPLUS variants)siemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC427E (incl. SIPLUS variants)siemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC477Dsiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC477Esiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC477E Prosiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC527Gsiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC547Esiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC547Gsiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC627Dsiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC627Esiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC647Dsiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC647Esiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC677Dsiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC677Esiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC827Dsiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC847Dsiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC847Esiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC ITP1000siemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMOTION P320-4Esiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMOTION P320-4Ssiemens_psirt

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC Field PG M4cisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC Field PG M5cisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC Field PG M6cisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC3000 SMART V2cisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC347Ecisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC427D (incl. SIPLUS variants)cisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC427E (incl. SIPLUS variants)cisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC477Dcisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC477Ecisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC477E Procisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC527Gcisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC547Ecisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC547Gcisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC627Dcisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC627Ecisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC647Dcisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC647Ecisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC677Dcisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC677Ecisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC827Dcisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC847Dcisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC847Ecisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC ITP1000cisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMOTION P320-4Ecisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMOTION P320-4Scisa_csaf_ot

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • No fix plannedSIMATIC Field PG M4siemens_psirt

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC347Esiemens_psirt

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC427D (incl. SIPLUS variants)siemens_psirt

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC477Dsiemens_psirt

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC547Esiemens_psirt

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC627Dsiemens_psirt

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC647Dsiemens_psirt

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC677Dsiemens_psirt

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC827Dsiemens_psirt

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC847Dsiemens_psirt

    Currently no remediation is planned

  • No fix plannedSIMOTION P320-4Esiemens_psirt

    Currently no remediation is planned

  • No fix plannedSIMOTION P320-4Ssiemens_psirt

    Currently no remediation is planned

  • No fix plannedSIMATIC Field PG M4cisa_csaf_ot

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC347Ecisa_csaf_ot

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC427D (incl. SIPLUS variants)cisa_csaf_ot

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC477Dcisa_csaf_ot

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC547Ecisa_csaf_ot

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC627Dcisa_csaf_ot

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC647Dcisa_csaf_ot

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC677Dcisa_csaf_ot

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC827Dcisa_csaf_ot

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC847Dcisa_csaf_ot

    Currently no remediation is planned

  • No fix plannedSIMOTION P320-4Ecisa_csaf_ot

    Currently no remediation is planned

  • No fix plannedSIMOTION P320-4Scisa_csaf_ot

    Currently no remediation is planned

02

cvss

Technical severity, 0–10. One row per scoring source.

5.5
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.1–5.5

v2.02.1lowAV:L/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 3.9 · impact 2.9
v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 1.8 · impact 3.6
v2.02.1lowAV:L/AC:L/Au:N/C:P/I:N/A:Nsecondary · FSTEC (BDU) RU
v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · CISA US
v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE
v3.15.1mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)
03

weaknesses

The CWE weakness classes this flaw belongs to.

04

affected products (822)

Products and version ranges known to be affected.

05

advisories (3)

Vendor and ecosystem advisories describing this.

  • SSA-534763SSA-534763: Special Register Buffer Data Sampling (SRBDS) aka Crosstalk in Industrial Products2020-09-08csaf · siemens_psirtDE

    Security researchers published information on a vulnerability known as Crosstalk (INTEL-SA-00320). This vulnerability affects modern Intel processors to a varying degree. Several Siemens Industrial Products contain processors that are affected by the vulnerability. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

  • WID-SEC-W-2023-0063Juniper Junos Space: Mehrere SchwachstellenDeutsch2022-01-12csaf · cert_bundDE

    Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, beliebigen Code auszuführen und seine Privilegien zu erweitern.

  • ICSA-20-252-07Siemens Industrial Products (Update F)2020-09-08icsa · cisa_csaf_otUS

    Security researchers published information on a vulnerability known as Crosstalk (INTEL-SA-00320). This vulnerability affects modern Intel processors to a varying degree. Several Siemens Industrial Products contain processors that are affected by the vulnerability. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

06

also known as (4)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

09

references (102)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan