Siemens SIMATIC Controller Web Servers Uncaught Exception (CVE-2020-15796)

A vulnerability has been identified in SIMATIC ET 200SP Open Controller incl. SIPLUS variants V20.8, SIMATIC S7-1500 Software Controller V20.8. The web server of the affected products contains a vulnerability that could allow a remote attacker to trigger a denial-of-service condition by sending a...

CVE-2020-15796

CVE-2020-15796 affects Siemens SIMATIC Controller Web Servers, specifically the web servers in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants, V20.8) and SIMATIC S7-1500 Software Controller (V20.8) . The vulnerability stems from an Uncaught Exception (CWE-248) in the web server, which co...

Siemens SIMATIC Controller Web Servers

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC Controller Web Servers Vulnerability: Uncaught Exception 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a...