Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-71431
HistorySep 15, 2021 - 12:00 a.m.

Siemens LOGO! CMR family and SIMATIC RTU 3000 family security feature issue vulnerability

2021-09-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
siemens
logo cmr
simatic rtu 3000
security vulnerability
tcp ip stack
random number
isn
attacker
sensitive information

EPSS

0.001

Percentile

25.0%

LOGO! CMR family is a communication system suitable for monitoring distributed devices and systems via text messages or e-mail. siemens SIMATIC RTU3000C is a compact RTU from Siemens (Germany) is an energy self-sufficient low-power remote terminal unit (RTU). siemens LOGO! CMR family and SIMATIC RTU 3000 family security feature issue vulnerability, the vulnerability stems from the product underlying TCP IP stack does not correctly calculate the random number used as the ISN (initial sequence number). An attacker could exploit the vulnerability by jamming traffic, spoofing connections and gaining access to sensitive information.

EPSS

0.001

Percentile

25.0%

Related for CNVD-2021-71431