In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions.
CPE | Name | Operator | Version |
---|---|---|---|
simatic_mv420_firmware | lt | 7.0.6 | |
simatic_mv440_firmware | lt | 7.0.6 |