Siemens TCP Stack of SIMATIC MV400

ics🔗 www.cisa.gov👁 116 Views

Siemens SIMATIC MV400 TCP Stack vulnerable to improper validation and insufficiently random values leading to TCP session termination and hijack

Reporter	Title	Published	Views	Family All 27
BDU FSTEC	TI-NDKTCPIP ISN Generator Unauthorized Access	9 Mar 202100:00	–	bdu_fstec
Circl	CVE-2020-25241	15 Mar 202119:29	–	circl
Circl	CVE-2020-27632	10 Mar 202120:53	–	circl
CNNVD	Siemens SIMATIC security feature vulnerabilities	11 Feb 202100:00	–	cnnvd
CNNVD	Siemens SIMATIC MV400 security vulnerabilities	9 Mar 202100:00	–	cnnvd
CNVD	Siemens SIMATIC MV400 Series TCP Protocol Stack Security Feature Issue Vulnerability	9 Mar 202100:00	–	cnvd
CNVD	Unspecified Vulnerability in Siemens SIMATIC MV400 Series TCP Protocol Stack	9 Mar 202100:00	–	cnvd
CVE	CVE-2020-25241	15 Mar 202117:03	–	cve
CVE	CVE-2020-27632	10 Mar 202100:00	–	cve
Cvelist	CVE-2020-25241	15 Mar 202117:03	–	cvelist

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-599268.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-068-07.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-068-07
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

09 Mar 2021 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 25

CVSS 3.17.5

EPSS0.02139