CVE-2020-15796

2020-12-1421:05:18

CWE-248

siemens

www.cve.org

vulnerability

simatic

denial-of-service

EPSS

0.001

Percentile

51.4%

JSON

A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500 Software Controller (V20.8). The web server of the affected products contains a vulnerability that could allow a remote attacker to trigger a denial-of-service condition by sending a specially crafted HTTP request.

CNA Affected

[
  {
    "product": "SIMATIC ET 200SP Open Controller (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "V20.8"
      }
    ]
  },
  {
    "product": "SIMATIC S7-1500 Software Controller",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "V20.8"
      }
    ]
  }
]

References

cert-portal.siemens.com/productcert/pdf/ssa-700697.pdf

EPSS

0.001

Percentile

51.4%

JSON

Related for CVELIST:CVE-2020-15796