{"id":"CVE-2020-15783","state":"PUBLISHED","title":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl","description":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.","publishedAt":"2020-11-12T19:21:09.000Z","updatedAt":"2026-06-02T18:37:28.538Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"CISA-ADP"},"assigner":"siemens","products":["Siemens SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)","Siemens SIMATIC TDC CPU555","Siemens SINUMERIK 840D sl"],"affected":[{"vendor":"Siemens","product":"SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC TDC CPU555","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Siemens","product":"SINUMERIK 840D sl","versions":[{"version":"All versions","status":"affected"}]}],"references":["https://cert-portal.siemens.com/productcert/pdf/ssa-492828.pdf"],"weaknesses":["CWE-400"],"ingestedAt":"2026-10-29T19:46:36.523Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/15xxx/CVE-2020-15783.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2020-15783","state":"PUBLISHED","datePublished":"2020-11-12T19:21:09.000Z","dateUpdated":"2026-06-02T18:37:28.538Z","assignerShortName":"siemens","assignerOrgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","dateReserved":"2020-07-15T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service."}],"affected":[{"vendor":"Siemens","product":"SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC TDC CPU555","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Siemens","product":"SINUMERIK 840D sl","versions":[{"version":"All versions","status":"affected"}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-492828.pdf","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-400","description":"CWE-400: Uncontrolled Resource Consumption","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"siemens","dateUpdated":"2022-08-10T11:16:39.000Z","orgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"productcert@siemens.com","ID":"CVE-2020-15783","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)","version":{"version_data":[{"version_value":"All versions"}]}},{"product_name":"SIMATIC TDC CPU555","version":{"version_data":[{"version_value":"All versions"}]}},{"product_name":"SINUMERIK 840D sl","version":{"version_data":[{"version_value":"All versions"}]}}]},"vendor_name":"Siemens"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-400: Uncontrolled Resource Consumption"}]}]},"references":{"reference_data":[{"name":"https://cert-portal.siemens.com/productcert/pdf/ssa-492828.pdf","refsource":"MISC","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-492828.pdf"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-492828.pdf","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T13:22:30.725Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"timestamp":"2026-06-02T18:37:15.928440Z","id":"CVE-2020-15783","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-06-02T18:37:28.538Z"}}]}}}