CWE Code: 400
Vulnerability Type: privilege_escalation
CVSS Score: 5.0
CWE Name:  Uncontrolled Resource Consumption
Summary: a vulnerability has been identified in simatic s7-1200 (all versions), simatic s7-1500 (all versions < v2.6). an attacker could exhaust the available connection pool of an affected device by opening a sufficient number of connections to the device. successful exploitation requires an attacker to be able to send packets to port 102/tcp of the affected device. no user interaction and no user privileges are required to exploit the vulnerability. the vulnerability, if exploited, could cause a denial-of-service condition impacting the availability of the system. at the time of advisory publication no public exploitation of this vulnerability was known.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/NONE/PARTIAL
Published Date: 2018-12-13
Last Modified Date: 2019-10-09