PT-2020-19638 · Siemens · Simatic S7-200 Smart Cpu

Published 2020-07-14 · Updated 2020-07-17 · CVE-2020-7584

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SIMATIC S7-200 SMART CPU family versions V2.2 through V2.5.0

Description A vulnerability has been identified that affects the handling of large numbers of new incoming connections, potentially causing the device to crash under certain circumstances. This could be leveraged by an attacker to cause a Denial-of-Service situation.

Recommendations For SIMATIC S7-200 SMART CPU family versions V2.2 through V2.5.0, update to version V2.5.1 or later to resolve the issue.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2020-7584

Affected Products

Simatic S7-200 Smart Cpu

References · 3

• https://osv.dev/vulnerability/CVE-2020-7584 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-589181.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7584 · Security Note