CVE-2020-15796 Denial of service in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants)
Remote attackers can cause denial of service on Siemens SIMATIC controllers by sending crafted HTTP requests to the web server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-15796?
CVE-2020-15796 is a high-severity denial of service vulnerability in Siemens SIMATIC ET 200SP Open Controller (incl. SIPLUS variants), published on 14 Dec 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500 Software Controller (V20.8). The web server of the affected products contains a vulnerability that could allow a remote attacker to trigger a denial-of-service condition by sending a specially crafted HTTP request.
Weakness: CWE-248
Which versions are affected by CVE-2020-15796?
It affects 2 products.
Products include Siemens Simatic Et 200sp Open Controller Firmware, Siemens Simatic S7-1500 Software Controller Firmware.
How do I fix CVE-2020-15796?
No fix has been published for CVE-2020-15796 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2020-15796 being exploited?
There is no known exploitation of CVE-2020-15796 in the wild and no public exploit code.
Sources
Also known as GHSA-mffw-j524-mrjp.