Lucene search

K
nessusTenable720193.PRM
HistoryMay 08, 2019 - 12:00 a.m.

Siemens SIMATIC S7-1200 PLCs < 4.0 Random Number Generator Insufficient Entropy

2019-05-0800:00:00
Tenable
www.tenable.com
8

8.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:P/I:P/A:C

0.006 Low

EPSS

Percentile

77.8%

The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors, a different vulnerability than CVE-2014-2251.

Binary data 720193.prm

8.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:P/I:P/A:C

0.006 Low

EPSS

Percentile

77.8%