Lucene search
SiemensCVELIST:CVE-2020-15791HistorySep 09, 2020 - 6:13 p.m.
CVE-2020-15791
2020-09-0918:13:11
CWE-522
siemens
www.cve.org
1
simatic
s7-300
s7-400
authentication
vulnerability
iso-tsap
network traffic
credentials
sinumerik 840d
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX (F) 2010 (All versions), SINUMERIK 840D sl (All versions). The authentication protocol between a client and a PLC via port 102/tcp (ISO-TSAP) insufficiently protects the transmitted password. This could allow an attacker that is able to intercept the network traffic to obtain valid PLC credentials.
CNA Affected
[
{
"product": "SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
},
{
"product": "SIMATIC S7-400 CPU family (incl. SIPLUS variants)",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
},
{
"product": "SIMATIC WinAC RTX (F) 2010",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
},
{
"product": "SINUMERIK 840D sl",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
]Related
prion
prion
Authentication flaw
2020-09-09 19:15:00
nessus
nessus
Siemens Simatic Insufficiently Protected Credentials
2021-08-10 00:00:00
ics
ics
Siemens SIMATIC S7-300 and S7-400 CPUs (Update C)
2020-12-08 12:00:00
cve
cve
CVE-2020-15791
2020-09-09 19:15:20
nvd
nvd
CVE-2020-15791
2020-09-09 19:15:20