Critical Bug in Siemens SIMATIC PLCs Could Let Attackers Steal Cryptographic Keys

🗓️ 12 Oct 2022 10:41:00Reported by The Hacker NewsType

Critical Bug in Siemens SIMATIC PLCs - Attackers can Steal Cryptographic Key

Reporter	Title	Published	Views	Family All 92
GithubExploit	Exploit for Insufficiently Protected Credentials in Rockwellautomation Factorytalk_Services_Platform	31 Jul 202619:05	–	githubexploit
GithubExploit	InduGuard_vul_poc	19 Apr 202605:53	–	githubexploit
ATTACKERKB	CVE-2021-22681	3 Mar 202118:15	–	attackerkb
BDU FSTEC	The vulnerabilities of microprogrammed software in programmable logic controllers such as CompactLogix 1768, CompactLogix 1769, CompactLogix 5370, CompactLogix 5380, CompactLogix 5480, ControlLogix 5550, ControlLogix 5560, ControlLogix 5570, ControlLogix 5580, DriveLogix 5560, DriveLogix 5730, DriveLogix 1794-L34, Compact GuardLogix 5370, Compact GuardLogix 5380, GuardLogix 5570, GuardLogix 5580, and SoftLogix 5800 stem from insufficient protection of registration data. This allows attackers to elevate their privileges and alter the configuration of vulnerable devices.	9 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, GuardLogix, FlexLogix, DriveLogix, and SoftLogix controllers lies in the ability to introduce functionality from an untrusted control environment, allowing a perpetrator to execute arbitrary code.	5 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogrammed software in programmable logic controllers such as ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, CompactLogix 5480, and Compact GuardLogix 5380 lies in improper code generation. This allows attackers to implant code into the controller that the user will be unable to detect.	27 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogrammed software in programmable logic controllers SIMATIC S7-1200 and S7-1500 is related to insufficient protection of registration data, allowing attackers to gain full access to the device.	13 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens’ programmable logic controllers’ microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to execute arbitrary code.	13 Oct 202200:00	–	bdu_fstec
Circl	CVE-2020-15782	28 May 202120:07	–	circl
Circl	CVE-2021-22681	4 Apr 202210:47	–	circl