Siemens SIMATIC Controller Web Servers

Summary

Vulnerabilities 1

• Unscored —
  CVE-2020-15796

  A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-150…

  Siemens SIMATIC S7-1500 Software Controller SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) ICS / OT
  Dec 14, 2020

Revision history

1. 2020-12-08 #1

   ICSA-20-343-09 Siemens SIMATIC Controller Web Servers

References

• ICS Advisory ICSA-20-343-09 Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-20-343-09
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B
• SSA-496604: SSA-700697: Denial-of-Service Vulnerability in Web Server of SIMATIC Controllers - TXT Version
  https://cert-portal.siemens.com/productcert/txt/SSA-700697.txt