CVE-2015-2177
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect...
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 102 or (2) Profibus.
Exploit likelihood
What each source reports
CVE List
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 102 or (2) Profibus.
- Record
CVE-2015-2177- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2015-2285
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 102 or (2) Profibus.
- Record
EUVD-2015-2285- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-wm75-j4x9-j8hf
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect...
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 102 or (2) Profibus.
- Record
GHSA-wm75-j4x9-j8hf- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 102 or (2) Profibus.
- Record
CVE-2015-2177- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Siemens SIMATIC S7-300 CPU - Remote Denial of Service | 2018-05-30 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-2177 is a high vulnerability (CVSS 7.8) in Siemens Simatic S7-300 Cpu, published March 7, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 34.3%, the 98th percentile. No source names a fixed version.
References
ics-cert.us-cert.gov/advisories/ICSA-15-064-04
securitytracker.com/id/1032040
exploit-db.com/exploits/44802
siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-987029.pdf
securityfocus.com/bid/72973
cert-portal.siemens.com/productcert/pdf/ssa-987029.pdf
nvd.nist.gov/vuln/detail/CVE-2015-2177
github.com/advisories/GHSA-wm75-j4x9-j8hf