Siemens SIMATIC Et 200sp Open Controller Firmware vulnerabilities

2 CVEs affecting Siemens SIMATIC Et 200sp Open Controller Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-24513, published 2021-06-09.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-15796, published 2020-12-14. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500 Software Controller (V20.8). The web server of the affected products contains…
• CVE-2020-24513, published 2021-06-09. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.