CVE-2020-15782

  1. Reconshell
  2. Vulnerabilities (CVE)
  3. CVE-2020-15782
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SINAMICS PERFECT HARMONY GH180 Drives (Drives manufactured before 2021-08-13), SINUMERIK MC (All versions < V6.15), SINUMERIK ONE (All versions < V6.15). Affected devices are vulnerable to a memory protection bypass through a specific operation. A remote unauthenticated attacker with network access to port 102/tcp could potentially write arbitrary data and code to protected memory areas or read sensitive data to launch further attacks.

9.8 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-434534.pdf Patch Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-434536.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-434535.pdf
Advertisement

NeevaHost hosting service
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:siemens:simatic_driver_controller_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:siemens:cpu_1507d_tf:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1504d_tf:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:siemens:s7-1200_cpu_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:siemens:cpu_1217c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1215fc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1215c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1214fc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1214c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1212fc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1212c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1211c:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:siemens:s7-1500_cpu_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:siemens:6es7512-1ck01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7512-1dk01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7512-1sk01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7513-1al01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7513-1al02-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7513-1fl01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7513-1fl02-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7513-1rl00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7513-2gl00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7513-2pl00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7515-2am01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7515-2am02-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7515-2fm01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7515-2fm02-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7515-2rm00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7515-2tm01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7515-2um01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7516-2gn00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7516-2pn00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7516-3an01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7516-3an02-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7516-3fn01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7516-3fn02-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7516-3tn00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7516-3un00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7517-3ap00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7517-3fp00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7517-3hp00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7517-3tp00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7517-3up00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7518-4ap00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7518-4ap00-3ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7518-4fp00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7512-1ck00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7511-1uk01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7511-1tk01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7511-1fk02-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7511-1fk01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7511-1ck01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7511-1ck00-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7511-1ak02-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7511-1ak01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7510-1sj01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7510-1dj01-0ab0:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6es7518-4fp00-3ab0:-:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:a:siemens:simatic_s7-1500__software_controller:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_s7-plcsim_advanced:*:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:siemens:et_200sp_open_controller_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:siemens:cpu_1515sp_pc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1515sp_pc2:-:*:*:*:*:*:*:*
Information

Published : 2021-05-28 09:15

Updated : 2021-09-14 04:15

NVD link : CVE-2020-15782

Mitre link : CVE-2020-15782

JSON object : View

CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Advertisement

dedicated server usa
Products Affected

siemens

  • cpu_1215c
  • 6es7517-3up00-0ab0
  • cpu_1217c
  • 6es7516-3fn02-0ab0
  • cpu_1211c
  • 6es7512-1dk01-0ab0
  • 6es7515-2am02-0ab0
  • cpu_1515sp_pc
  • 6es7517-3hp00-0ab0
  • 6es7516-3an01-0ab0
  • 6es7511-1uk01-0ab0
  • 6es7516-3un00-0ab0
  • 6es7511-1fk01-0ab0
  • 6es7515-2rm00-0ab0
  • 6es7512-1ck01-0ab0
  • s7-1200_cpu_firmware
  • 6es7512-1sk01-0ab0
  • 6es7516-3an02-0ab0
  • 6es7517-3fp00-0ab0
  • 6es7511-1ak02-0ab0
  • 6es7516-3tn00-0ab0
  • 6es7511-1fk02-0ab0
  • cpu_1515sp_pc2
  • 6es7511-1tk01-0ab0
  • 6es7516-2gn00-0ab0
  • 6es7518-4fp00-0ab0
  • 6es7515-2tm01-0ab0
  • 6es7510-1sj01-0ab0
  • cpu_1214c
  • simatic_s7-plcsim_advanced
  • 6es7513-1rl00-0ab0
  • 6es7512-1ck00-0ab0
  • cpu_1504d_tf
  • 6es7511-1ak01-0ab0
  • 6es7511-1ck00-0ab0
  • 6es7515-2fm02-0ab0
  • 6es7513-2pl00-0ab0
  • 6es7511-1ck01-0ab0
  • simatic_driver_controller_firmware
  • 6es7513-2gl00-0ab0
  • 6es7518-4fp00-3ab0
  • 6es7513-1al02-0ab0
  • 6es7513-1fl01-0ab0
  • 6es7517-3tp00-0ab0
  • 6es7515-2fm01-0ab0
  • et_200sp_open_controller_firmware
  • cpu_1214fc
  • cpu_1212fc
  • 6es7516-3fn01-0ab0
  • 6es7518-4ap00-0ab0
  • 6es7518-4ap00-3ab0
  • s7-1500_cpu_firmware
  • 6es7513-1al01-0ab0
  • 6es7515-2um01-0ab0
  • 6es7510-1dj01-0ab0
  • 6es7516-2pn00-0ab0
  • cpu_1212c
  • simatic_s7-1500__software_controller
  • cpu_1507d_tf
  • 6es7513-1fl02-0ab0
  • 6es7515-2am01-0ab0
  • cpu_1215fc
  • 6es7517-3ap00-0ab0