peter bassill · operator
$ cve CVE-2020-15782 JSON

CVE-2020-15782

9.8
CRITICAL · CVSS 3.1 · EPSS 5.2% (pctl 92)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SINAMICS PERFECT HARMONY GH180 Drives (Drives manufactured before 2021-08-13), SINUMERIK MC (All versions < V6.15), SINUMERIK ONE (All versions < V6.15). Affected devices are vulnerable to a memory protection bypass through a specific operation. A remote unauthenticated attacker with network access to port 102/tcp could potentially write arbitrary data and code to protected memory areas or read sensitive data to launch further attacks.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS5.18% — more likely to be exploited than 92% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploitnone known
Published2021-05-28
Last modified2026-06-17

Affected (40)

VendorProduct
siemens6es7510-1dj01-0ab0
siemens6es7510-1sj01-0ab0
siemens6es7511-1ak01-0ab0
siemens6es7511-1ak02-0ab0
siemens6es7511-1ck00-0ab0
siemens6es7511-1ck01-0ab0
siemens6es7511-1fk01-0ab0
siemens6es7511-1fk02-0ab0
siemens6es7511-1tk01-0ab0
siemens6es7511-1uk01-0ab0
siemens6es7512-1ck00-0ab0
siemens6es7512-1ck01-0ab0
siemens6es7512-1dk01-0ab0
siemens6es7512-1sk01-0ab0
siemens6es7513-1al01-0ab0
siemens6es7513-1al02-0ab0
siemens6es7513-1fl01-0ab0
siemens6es7513-1fl02-0ab0
siemens6es7513-1rl00-0ab0
siemens6es7513-2gl00-0ab0
siemens6es7513-2pl00-0ab0
siemens6es7515-2am01-0ab0
siemens6es7515-2am02-0ab0
siemens6es7515-2fm01-0ab0
siemens6es7515-2fm02-0ab0
siemens6es7515-2rm00-0ab0
siemens6es7515-2tm01-0ab0
siemenscpu 1211c
siemenscpu 1212c
siemenscpu 1212fc
siemenscpu 1214c
siemenscpu 1214fc
siemenscpu 1215c
siemenscpu 1215fc
siemenscpu 1217c
siemenscpu 1504d tf
siemenscpu 1507d tf
siemenss7-1200 cpu firmware
siemenss7-1500 cpu firmware
siemenssimatic driver controller firmware

References

→ the Explorer  ·  watch your stack  ·  NVD