CVE-2020-28397

🗓️ 10 Aug 2021 10:35:23Reported by siemensType

CVE-2020-28397: Incorrect Authorization Chec

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2020-28397	10 Aug 202114:37	–	circl
CNNVD	Siemens SIMATIC S7-1500 CPU和SIMATIC S7-1500 授权问题漏洞	10 Aug 202100:00	–	cnnvd
CNVD	Siemens SIMATIC S7-1500 CPU and SIMATIC S7-1500 Incorrect Authorization Vulnerability	11 Aug 202100:00	–	cnvd
Cvelist	CVE-2020-28397	10 Aug 202110:35	–	cvelist
EUVD	EUVD-2020-20856	7 Oct 202500:30	–	euvd
ICS	Siemens SIMATIC and TIM	10 Aug 202100:00	–	ics
NCSC	Vulnerabilities fixed in Siemens Simatic products	10 Aug 202100:00	–	ncsc
NVD	CVE-2020-28397	10 Aug 202111:15	–	nvd
Prion	Authorization	10 Aug 202111:15	–	prion
RedhatCVE	CVE-2020-28397	22 May 202515:26	–	redhatcve

NVD

Node

siemens cpu_1504d_tf_firmwareRange<2.9.2

AND

siemens cpu_1504d_tfMatch-

Node

siemens cpu_1507d_tf_firmwareRange<2.9.2

AND

siemens cpu_1507d_tfMatch-

Node

siemens cpu_1515sp_pc2_tf_firmwareRange<21.9

AND

siemens cpu_1515sp_pc2_tfMatch-

Node

siemens simatic_s7_plcsim_advanced_firmwareRange2.0–4.0

AND

siemens simatic_s7_plcsim_advancedMatch-

Node

siemens simatic_s7-1500_software_controllerRange2.5–21.9

Node

siemens tim_1531_irc_firmwareMatch2.1

AND

siemens tim_1531_ircMatch-

Node

siemens cpu_1211c_firmwareMatch4.4

AND

siemens cpu_1211cMatch-

Node

siemens cpu_1212c_firmwareMatch4.4

AND

siemens cpu_1212cMatch-

Node

siemens cpu_1212fc_firmwareMatch4.4

AND

siemens cpu_1212fcMatch-

Node

siemens cpu_1214fc_firmwareMatch4.4

AND

siemens cpu_1214fcMatch-

Node

siemens cpu_1214c_firmwareMatch4.4

AND

siemens cpu_1214cMatch-

Node

siemens cpu_1215fc_firmwareMatch4.4

AND

siemens cpu_1215fcMatch-

Node

siemens cpu_1215c_firmwareMatch4.4

AND

siemens cpu_1215cMatch-

Node

siemens cpu_1217c_firmwareMatch4.4

AND

siemens cpu_1217cMatch-

Node

siemens siplus_cpu_1510sp_f-1pn_firmwareRange2.5–2.9.2

AND

siemens siplus_cpu_1510sp_f-1pnMatch-

Node

siemens siplus_cpu_1511-1_pn_firmwareRange2.5–2.9.2

AND

siemens siplus_cpu_1511-1_pnMatch-

Node

siemens siplus_cpu_1511-1_pn_firmwareRange2.5–2.9.2

AND

siemens siplus_cpu_1511-1_pnMatch-

Node

siemens siplus_cpu_1511f-1_pn_firmwareRange2.5–2.9.2

AND

siemens siplus_cpu_1511f-1_pnMatch-

Node

siemens siplus_cpu_1512sp-1_pn_firmwareRange2.5–2.9.2

AND

siemens siplus_cpu_1512sp-1_pnMatch-

Node

siemens siplus_cpu_1512sp_f-1pn_firmwareRange2.5–2.9.2

AND

siemens siplus_cpu_1512sp_f-1pnMatch-

Node

siemens siplus_cpu_1513-1_pn_firmwareRange2.5–2.9.2

AND

siemens siplus_cpu_1513-1_pnMatch-

Node

siemens siplus_cpu_1513-1_pn_firmwareRange2.5–2.9.2

AND

siemens siplus_cpu_1513-1_pnMatch-

Node

siemens siplus_cpu_1513f-1_pn_firmwareRange2.5–2.9.2

AND

siemens siplus_cpu_1513f-1_pnMatch-

Node

siemens siplus_cpu_1516-3_pn/dp_firmwareRange2.5–2.9.2

AND

siemens siplus_cpu_1516-3_pn/dpMatch-

Node

siemens siplus_cpu_1516-3_pn/dp_firmwareRange2.5–2.9.2

AND

siemens siplus_cpu_1516-3_pn/dpMatch-

Node

siemens siplus_cpu-1516f-3_pn/dp_firmwareRange2.5–2.9.2

AND

siemens siplus_cpu-1516f-3_pn/dpMatch-

Node

siemens siplus_cpu_1518-4_pn/dp_firmwareRange2.5–2.9.2

AND

siemens siplus_cpu_1518-4_pn/dpMatch-

Node

siemens siplus_cpu_1518f-4_pn/dp_firmwareRange2.5–2.9.2

AND

siemens siplus_cpu_1518f-4_pn/dpMatch-

Node

siemens cpu_1510sp-1pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1510sp-1pnMatch-

Node

siemens cpu1510sp_f-1_firmwareRange2.5–2.9.2

AND

siemens cpu1510sp_f-1Match-

Node

siemens cpu_1511-1pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1511-1pnMatch-

Node

siemens cpu_1511-1pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1511-1pnMatch-

Node

siemens cpu_1511c-1_pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1511c-1_pnMatch-

Node

siemens cpu_1511f-1pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1511f-1pnMatch-

Node

siemens cpu_1511t-1pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1511t-1pnMatch-

Node

siemens cpu_1511tf-1pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1511tf-1pnMatch-

Node

siemens cpu_1512c-1_pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1512c-1_pnMatch-

Node

siemens cpu_1512sp-1_pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1512sp-1_pnMatch-

Node

siemens cpu_1512sp_f-1_pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1512sp_f-1_pnMatch-

Node

siemens cpu_1513-1_pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1513-1_pnMatch-

Node

siemens cpu_1513f-1_pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1513f-1_pnMatch-

Node

siemens cpu_1513r-1_pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1513r-1_pnMatch-

Node

siemens cpu_1513pro_f-2_pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1513pro_f-2_pnMatch-

Node

siemens cpu_1515-2_firmwareRange2.5–2.9.2

AND

siemens cpu_1515-2Match-

Node

siemens cpu_1515f-2_firmwareRange2.5–2.9.2

AND

siemens cpu_1515f-2Match-

Node

siemens cpu_1515r-2_pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1515r-2_pnMatch-

Node

siemens cpu_1515t-2_pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1515t-2_pnMatch-

Node

siemens cpu_1515tf-2_pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1515tf-2_pnMatch-

Node

siemens cpu_1516pro_f-2_pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1516pro_f-2_pnMatch-

Node

siemens cpu_1516pro-2_pn_firmwareRange2.5–2.9.2

AND

siemens cpu_1516pro-2_pnMatch-

Node

siemens cpu_1516-3_firmwareRange2.5–2.9.2

AND

siemens cpu_1516-3Match-

Node

siemens cpu_1516f-3_firmwareRange2.5–2.9.2.

AND

siemens cpu_1516f-3Match-

Node

siemens cpu_1516t-3_pn/dp_firmwareRange2.5–2.9.2

AND

siemens cpu_1516t-3_pn/dpMatch-

Node

siemens cpu_1516tf-3_pn/dp_firmwareRange2.5–2.9.2

AND

siemens cpu_1516tf-3_pn/dpMatch-

Node

siemens cpu_1517-3_pn/dp_firmwareRange2.5–2.9.2

AND

siemens cpu_1517-3_pn/dpMatch-

Node

siemens cpu_1517f-3_pn/dp_firmwareRange2.5–2.9.2

AND

siemens cpu_1517f-3_pn/dpMatch-

Node

siemens cpu_1517t-3_pn/dp_firmwareRange2.5–2.9.2

AND

siemens cpu_1517t-3_pn/dpMatch-

Node

siemens cpu_1517tf-3_pn/dp_firmwareRange2.5–2.9.2

AND

siemens cpu_1517tf-3_pn/dpMatch-

Node

siemens cpu_1518-4_pn/dp_firmwareRange2.5–2.9.2

AND

siemens cpu_1518-4_pn/dpMatch-

Node

siemens cpu_1518f-4_pn/dp_firmwareRange2.5–2.9.2

AND

siemens cpu_1518f-4_pn/dpMatch-

[
  {
    "product": "SIMATIC Drive Controller family",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.9.2"
      }
    ]
  },
  {
    "product": "SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V21.9"
      }
    ]
  },
  {
    "product": "SIMATIC S7 PLCSIM Advanced",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions > V2 < V4"
      }
    ]
  },
  {
    "product": "SIMATIC S7-1200 CPU family (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "Version V4.4"
      }
    ]
  },
  {
    "product": "SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions > V2.5 < V2.9.2"
      }
    ]
  },
  {
    "product": "SIMATIC S7-1500 Software Controller",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions > V2.5 < V21.9"
      }
    ]
  },
  {
    "product": "TIM 1531 IRC (incl. SIPLUS NET variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "Version V2.1"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-865327.pdf

21 Nov 2024 05:22Current

5Medium risk

Vulners AI Score5

CVSS 25

CVSS 3.15.3

EPSS0.00183

CWE-863