CVE-2020-15783

HIGH

CVSS v3.1: 7.5 · EPSS: 0.0019 (40.7 percentile)

NetworkNo privilegesNo user interactionResource Exhaustion (DoS)Vendor advisory ref

Source data as of:

At a glance

Severity
HIGH
CVSS
7.5 v3.1 · NVD
EPSS
0.0019 (40.7 percentile) · FIRST.org
CISA KEV
No
Type
Resource Exhaustion (DoS) · NVD CWE
Attack conditions (CVSS vector)
NetworkNo privilegesNo user interaction · Source: NVD Vector
Affected vendors
siemens
Published
2020-11-12 · Modified: 2026-06-02

CVSS / EPSS / KEV

CVSS v3.1 7.5 / 10 HIGH Source: NVD
EPSS 0.0019 40.7 percentile Source: FIRST.org
CISA KEV No Source: CISA

Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources

Description

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.

Record details

CVE ID
CVE-2020-15783
CVSS (v3.1)
7.5 (HIGH)
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability subscore
3.9
Impact subscore
3.6
EPSS
0.0019 (40.7 percentile) — 2026-06-03
CISA KEV
No
Weakness (CWE)
CWE-400
Affected vendors
siemens
Affected configurations (CPE)
12
Published
2020-11-12
Modified
2026-06-02
Status
Modified

References

Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.