Siemens SIMATIC S7-300 and S7-400 CPUs Insufficiently Protected Credentials (CVE-2020-15791)

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 CPU family incl. SIPLUS variants All versions, SIMATIC WinAC RTX F 2010 All versions, SINUMERIK 840D sl All versions. The authentication protocol between a...

CVE-2020-15791

The CVE-2020-15791 entry describes an authentication vulnerability affecting Siemens SIMATIC S7-300/S7-400 CPU families (including related ET200, SIPLUS variants), SIMATIC WinAC RTX (F) 2010, and SINUMERIK 840D sl (all versions). The root cause is an insufficiently protected password in the ISO-T...