{"id":"CVE-2020-15783","aliases":["EUVD-2020-7766","GHSA-h3cm-r647-2vf6"],"status":"published","title":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and...","description":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01652,"percentile":0.76853,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2020-11-12T19:21:09Z","modified":"2026-06-17T02:57:10Z","products":[{"vendor":"siemens","product":"simatic s7-300 cpu family (incl. related et200 cpus and siplus variants)"},{"vendor":"siemens","product":"simatic tdc cpu555"},{"vendor":"siemens","product":"simatic_s7-300_cpu_312_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_314_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_315-2_dp_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_315-2_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_315f-2_dp_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_315f-2_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_317-2_dp_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_317-2_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_317f-2_dp_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_317f-2_pn_firmware"},{"vendor":"siemens","product":"simatic_tdc_cpu555_firmware"},{"vendor":"siemens","product":"sinumerik 840d sl"},{"vendor":"siemens","product":"sinumerik_840d_sl_firmware"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-492828.pdf","tags":["x_refsource_MISC","x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15783"},{"url":"https://github.com/advisories/GHSA-h3cm-r647-2vf6"}],"sources":{"cve":[{"id":"CVE-2020-15783","description":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.","status":"published","published":"2020-11-12T19:21:09Z","modified":"2026-06-02T18:37:28.538Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:35:50.228781Z"}],"euvd":[{"id":"EUVD-2020-7766","description":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.","status":"published","published":"2020-11-12T19:21:09Z","modified":"2026-06-02T18:37:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:55.651138Z"}],"ghsa":[{"id":"GHSA-h3cm-r647-2vf6","title":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and...","description":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.","status":"published","published":"2022-05-24T17:33:37Z","modified":"2023-01-29T05:05:16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:45:44.97547Z"}],"nvd":[{"id":"CVE-2020-15783","description":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.","status":"published","published":"2020-11-12T20:15:16.343Z","modified":"2026-06-17T02:57:10.91Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:06:24.137599Z"}]}}