CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2020-15783
High (7.5) in siemens. EPSS 1.7% chance of exploitation in the next 30 days.
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.
Severity
- EPSS
- 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
- CWE
- CWE-400
- Published
- Modified
- Record from
- the NVD, synced
Affected
- siemens:simatic_s7-300_cpu_312_firmware
- siemens:simatic_s7-300_cpu_314_firmware
- siemens:simatic_s7-300_cpu_315-2_dp_firmware
- siemens:simatic_s7-300_cpu_315-2_pn_firmware
- siemens:simatic_s7-300_cpu_315f-2_dp_firmware
- siemens:simatic_s7-300_cpu_315f-2_pn_firmware
- siemens:simatic_s7-300_cpu_317-2_dp_firmware
- siemens:simatic_s7-300_cpu_317-2_pn_firmware
- siemens:simatic_s7-300_cpu_317f-2_dp_firmware
- siemens:simatic_s7-300_cpu_317f-2_pn_firmware
- siemens:simatic_tdc_cpu555_firmware
- siemens:sinumerik_840d_sl_firmware