CVE Feed

    Dashboard / CVE / CVE-2020-15796

    CVE-2020-15796

    A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500 Software Controller (V20.8). The web server of the affected products contains a vulnerability that could allow a remote attacker to trigger a denial-of-service condition by sending a specially crafted HTTP request.

    Published:Dec 14, 2020
    Last Modified:Nov 21, 2024
    EPS:Dec 14, 2020
    EPSS Score:0.01165
    CVSS Score:7.5

    Affected Products

    Vendor
    Siemens
    Product
    Simatic Et 200sp Open Controller
    Vendor
    Siemens
    Product
    Simatic Et 200sp Open Controller Firmware
    Vendor
    Siemens
    Product
    Simatic S7-1500 Software Controller
    Vendor
    Siemens
    Product
    Simatic S7-1500 Software Controller Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-248 Uncaught Exception

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High