Details of VAR-202011-1556

ID

VAR-202011-1556

TITLE

SIMATIC S7-300 PLC has industrial control equipment vulnerabilities

Trust: 0.6

sources: CNVD: CNVD-2020-61851

DESCRIPTION

S7-300 is a modular small PLC system. SIMATIC S7-300 PLC has a vulnerability in industrial control equipment. Attackers can use the vulnerability to cause a denial of service on the server.

Trust: 0.6

sources: CNVD: CNVD-2020-61851

IOT TAXONOMY

category:

['IoT', 'ICS']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2020-61851

AFFECTED PRODUCTS

vendor:

siemens

model:

simatic s7-300

scope:

version:

Trust: 0.6

sources: CNVD: CNVD-2020-61851

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2020-61851
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2020-61851
severity:	MEDIUM
baseScore:	4.9
vectorString:	AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2020-61851

EXTERNAL IDS

db:

CNVD

id:

CNVD-2020-61851

Trust: 0.6

sources: CNVD: CNVD-2020-61851

SOURCES

db:

CNVD

id:

CNVD-2020-61851

LAST UPDATE DATE

2022-05-04T09:08:50.169000+00:00

SOURCES UPDATE DATE

db:

CNVD

id:

CNVD-2020-61851

date:

2020-11-10T00:00:00

SOURCES RELEASE DATE

db:

CNVD

id:

CNVD-2020-61851

date:

2020-11-09T00:00:00