CVE-2020-28391

Summary: CVE-2020-28391 affects Siemens SCALANCE X switches (X-200, X-200IRT, X-200RNA; incl. SIPLUS NET variants). Root cause: after factory reset, devices normally generate a new unique key, but when used with C-PLUG they ship a hardcoded private RSA key, enabling a man-in-the-middle and decryp...

PT-2021-2204 · Siemens · C-Plug +2

Name of the Vulnerable Software and Affected Versions: SCALANCE X-200 switch family incl. SIPLUS NET variants versions prior to V5.2.5 SCALANCE X-200IRT switch family incl. SIPLUS NET variants versions prior to V5.5.0 SCALANCE X-200RNA switch family versions prior to V3.2.7 Description: A...

CVE-2020-25230

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an outdated cipher mode on port 10005/tcp, an attacker could extract the encryption key from a captured communication with the device...

CVE-2020-25229

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker could change the password or change the configuration on any...

CVE-2020-25230

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an outdated cipher mode on port 10005/tcp, an attacker could extract the encryption key from a captured communication with the device...

CVE-2020-25232

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on port...

CVE-2020-25228

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. A service available on port 10005/tcp of the affected devices could allow complete access to all services without authorization. An attacker could gain full control over an affected device, if he has access...

Authorization

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. A service available on port 10005/tcp of the affected devices could allow complete access to all services without authorization. An attacker could gain full control over an affected device, if he has access...

Design/Logic Flaw

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. The firmware update of affected devices contains the private RSA key that is used as a basis for encryption of communication with the device...

Format string

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. The password used for authentication for the LOGO! Website and the LOGO! Access Tool is sent in a recoverable format. An attacker with access to the network traffic could derive valid logins...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC ET 200SP Open Controller incl. SIPLUS variants V20.8, SIMATIC S7-1500 Software Controller V20.8. The web server of the affected products contains a vulnerability that could allow a remote attacker to trigger a denial-of-service condition by sending a...

CVE-2020-25234

The CVE-2020-25234 entry applies to Siemens LOGO! 8 BM (incl. SIPLUS) and LOGO! Soft Comfort (pre-8.3). The root issue is that UDFs saved in stored program files are protected only by password protection implemented in the display software, enabling an attacker to reverse engineer UDFs from these...

CVE-2020-25233

The vulnerability CVE-2020-25233 affects LOGO! 8 BM (incl. SIPLUS variants) for all versions prior to V8.3. The root cause is that the firmware update package contains the device’s private RSA key used to encrypt communications, enabling potential confidential information disclosure. Impact is dr...

CVE-2020-25232

CVE-2020-25232 affects Siemens LOGO! 8 BM (incl. SIPLUS variants) — all versions prior to 8.3. The vulnerability arises from using an insecure random number generation function and a deprecated cryptographic function, which could allow an attacker to extract the communication key used with the de...

CVE-2020-25235

Siemens LOGO! 8 BM (incl. SIPLUS variants) is affected by CVE-2020-25235 in all versions prior to 8.3. The vulnerability, categorized as Insufficiently Protected Credentials (CWE-522), allows an attacker with network access to derive valid logins because the authentication password used for the L...

CVE-2020-25231

CVE-2020-25231 affects Siemens LOGO! 8 BM (incl. SIPLUS variants) and LOGO! Soft Comfort with all versions before 8.3. The root cause is a static cryptographic key used to encrypt program data, enabling an attacker to extract confidential information from protected program files. Impact is inform...

CVE-2020-25230

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an outdated cipher mode on port 10005/tcp, an attacker could extract the encryption key from a captured communication with the device...

CVE-2020-25228

CVE-2020-25228 affects Siemens LOGO! 8 BM (incl. SIPLUS variants) with all versions prior to 8.3. The issue is Missing Authentication for Critical Function on a service reachable at port 10005/tcp, enabling an attacker with access to that service to gain full control of the device and access all ...

CVE-2020-25229

Summary: CVE-2020-25229 affects Siemens LOGO! 8 BM (incl. SIPLUS variants) prior to version 8.3. The vulnerability arises from using a static cryptographic key for device communication, enabling replay attacks that could let an attacker modify passwords or configurations if they reuse prepared me...

CVE-2020-25230

Siemens LOGO! 8 BM (incl. SIPLUS variants) is affected by CVE-2020-25230 due to use of an outdated cipher mode on port 10005/tcp, which could allow an attacker to extract the encryption key from captured traffic. Affected versions are all prior to v8.3. Siemens has released updates to version 8.3...