CVE-2020-15796 — Uncaught Exception in Siemens Simatic ET 200sp Open Controller Firmware

CWE-248 — Uncaught Exception3 documents3 sources
Severity
7.5HIGHNVD
EPSS
1.2%
top 21.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Siemens Simatic ET 200sp Open Controller FirmwareSiemens Simatic S7-1500 Software Controller FirmwareSiemens Simatic ET 200sp Open Controller+1 more
Timeline
PublishedDec 14
Latest updateMay 24

Description

A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500 Software Controller (V20.8). The web server of the affected products contains a vulnerability that could allow a remote attacker to trigger a denial-of-service condition by sending a specially crafted HTTP request.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

🔴Vulnerability Details

2
GHSA
GHSA-mffw-j524-mrjp: A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl↗2022-05-24
▶
CVEList
CVE-2020-15796: A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl↗2020-12-14
▶
CVE-2020-15796 — Uncaught Exception in Siemens | cvebase