{"schemaVersion":3,"id":"CVE-2020-15783","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.","dates":{"published":"2020-11-12T19:21:09.000Z","modified":"2026-06-02T18:37:28.538Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.8,"severity":"high","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01666,"percentile":0.76399,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01666},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01666,"percentile":0.76399}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01666,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01666,"percentile":0.76399}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-400","name":"Uncontrolled Resource Consumption","description":"The product does not properly control the allocation and maintenance of a limited resource.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/400.html"}],"affected":[{"vendor":"siemens","product":"simatic s7-300 cpu family (incl. related et200 cpus and siplus variants)","name":"SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)","label":"simatic s7-300 cpu family (incl. related et200 cpus and siplus variants)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/siemens/simatic_s7-300_cpu_family_incl_related_et200_cpus_and_siplus_variants"},{"vendor":"siemens","product":"simatic_tdc_cpu555_firmware","name":"simatic tdc cpu555 firmware","label":"simatic_tdc_cpu555_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/siemens/simatic_tdc_cpu555"},{"vendor":"siemens","product":"sinumerik_840d_sl","name":"sinumerik 840d sl","label":"sinumerik_840d_sl","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/siemens/sinumerik_840d_sl"}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-492828.pdf","label":"cert-portal.siemens.com/productcert/pdf/ssa-492828.pdf","hostname":"cert-portal.siemens.com","tags":["X Refsource MISC","Mitigation","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2020-11-12T19:21:09.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-02T18:37:28.538Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":32,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T15:07:29.866Z","stale":false,"partial":false}}