Siemens TCP Stack of SIMATIC MV400

ics🔗 www.cisa.gov👁 71 Views

Siemens SIMATIC MV400 TCP Stack vulnerable to improper validation and insufficiently random values leading to TCP session termination and hijack

Reporter	Title	Published	Views	Family All 23
BDU FSTEC	The vulnerability in the implementation of the ISN generator for the TI-NDKTCPIP protocol allows a perpetrator to gain unauthorized access to protected information.	9 Mar 202100:00	–	bdu_fstec
Circl	CVE-2020-25241	15 Mar 202119:29	–	circl
Circl	CVE-2020-27632	10 Mar 202120:53	–	circl
CNNVD	Siemens SIMATIC 安全特征问题漏洞	11 Feb 202100:00	–	cnnvd
CNNVD	Siemens SIMATIC MV400 安全漏洞	9 Mar 202100:00	–	cnnvd
CNVD	Siemens SIMATIC MV400 Series TCP Protocol Stack Security Feature Issue Vulnerability	9 Mar 202100:00	–	cnvd
CNVD	Unspecified Vulnerability in Siemens SIMATIC MV400 Series TCP Protocol Stack	9 Mar 202100:00	–	cnvd
CVE	CVE-2020-25241	15 Mar 202117:03	–	cve
CVE	CVE-2020-27632	10 Mar 202100:00	–	cve
Cvelist	CVE-2020-25241	15 Mar 202117:03	–	cvelist

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-599268.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-068-07.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-068-07
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

09 Mar 2021 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 25

CVSS 3.17.5

EPSS0.00389