CVE-2020-25241

The CVE-2020-25241 entry concerns the SIMATIC MV400 family (all versions before 7.0.6). The underlying TCP stack does not correctly validate the sequence number of incoming TCP RST packets, enabling an attacker to terminate arbitrary TCP sessions. Affected products are Siemens SIMATIC MV400 devic...

CVE-2020-27632

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions...

CVE-2020-27632

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions...

Code injection

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions...

CVE-2020-27632

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions...

CVE-2020-27632

The CVE-2020-27632 issue affects the SIMATIC MV400 family prior to v7.0.6. The root cause is that the ISN generator is initialized with a constant value and uses constant increments, making initial sequence numbers highly predictable. This can enable an attacker to predict and hijack TCP sessions...

Unspecified Vulnerability in Siemens SIMATIC MV400 Series TCP Protocol Stack

Siemens SIMATIC MV400 is an industrial device from Siemens Germany. It is used for optical identification. An unspecified vulnerability exists in the Siemens SIMATIC MV400 series TCP protocol stack. An attacker can exploit this vulnerability to terminate arbitrary TCP sessions...

Siemens SIMATIC 安全漏洞

SIMATIC S7-PLCSIM V5.4 is a Windows application that simulates the execution of user programs for the simulation of analog S7-300 CPUs, S7-400 CPUs, and WinAC series controllers. A security vulnerability exists in Siemens SIMATIC S7-PLCSIM. An attacker could exploit the vulnerability to cause a...

Siemens SCALANCE and SIMATIC libcurl

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SCALANCE and SIMATIC Vulnerability: Out-of-bounds Read 2. RISK EVALUATION Successful exploitation of this third-party vulnerability could allow an attacker to cause a...

Siemens SIMATIC 代码问题漏洞

Siemens SIMATIC is a configuration software from Siemens. A code issue vulnerability exists in Siemens SIMATIC, no information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

Siemens SIMATIC S7-PLCSIM Denial of Service Vulnerability

SIMATIC S7-PLCSIM V5.4 is a Windows application that simulates the execution of user programs for the simulation of analog S7-300 CPUs, S7-400 CPUs, and WinAC series controllers. A security vulnerability exists in Siemens SIMATIC S7-PLCSIM. An attacker can exploit the vulnerability to cause a...

Siemens SIMATIC S7-PLCSIM Null Pointer Dereference Vulnerability

SIMATIC S7-PLCSIM V5.4 is a Windows application that simulates the execution of user programs for the simulation of analog S7-300 CPUs, S7-400 CPUs, and WinAC series controllers. A null pointer dereference vulnerability exists in Siemens SIMATIC S7-PLCSIM. An attacker could exploit the...

Vulnerabilities fixed in Siemens Simatic

Siemens has fixed vulnerabilities in Simatic products. The vulnerabilities allow an unauthenticated remote malicious person to remote may be able to launch attacks that result in the following categories of damage: Denial-of-Service DoS Remote code execution Administrator/Root privileges Spoofing...

Siemens SIMATIC S7-PLCSIM

1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: SIMATIC S7-PLCSIM v5.4 Vulnerabilities: Infinite Loop, NULL Pointer Dereference, Divide by Zero 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker with local...

Siemens SIMATIC MV400 Series TCP Protocol Stack Security Feature Issue Vulnerability

Siemens SIMATIC MV400 is an industrial device from Siemens Germany. It is used for optical identification. A security vulnerability exists in the Siemens SIMATIC MV400 series TCP protocol stack. An attacker could exploit this vulnerability to predict and hijack TCP sessions...

Siemens SIMATIC S7-PLCSIM Infinite Loop Vulnerability

SIMATIC S7-PLCSIM V5.4 is a Windows application that simulates the execution of user programs for the simulation of analog S7-300 CPUs, S7-400 CPUs, and WinAC series controllers. A security vulnerability exists in Siemens SIMATIC S7-PLCSIM. An attacker could exploit the vulnerability to cause a...

Siemens SIMATIC MV400 安全漏洞

Siemens SIMATIC MV400 is an industrial device from Siemens Germany. It is used for optical identification. An unspecified vulnerability exists in the Siemens SIMATIC MV400 series TCP protocol stack. An attacker can exploit this vulnerability to terminate arbitrary TCP sessions...

Siemens SIMATIC 数字错误漏洞

SIMATIC S7-PLCSIM V5.4 is a Windows application that simulates the execution of user programs for the simulation of analog S7-300 CPUs, S7-400 CPUs, and WinAC series controllers. A security vulnerability exists in Siemens SIMATIC S7-PLCSIM. An attacker can exploit the vulnerability to cause a...

Siemens TCP Stack of SIMATIC MV400

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC MV400 Vulnerabilities: Improper Validation of Specified Index, Position, or Offset in Input; Use of Insufficiently Random Values 2. RISK EVALUATION Successful...

PT-2021-2229 · Siemens · Simatic Mv400

Name of the Vulnerable Software and Affected Versions: SIMATIC MV400 family versions prior to v7.0.6 Description: The issue is related to the implementation of the ISN generator in the TI-NDKTCPIP protocol stack, which uses insufficiently random values. This could allow a remote attacker to predi...