← CVE Intelligence

CVE-2020-15791

Siemens / SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) PUBLISHED

Description (CNA)

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX (F) 2010 (All versions), SINUMERIK 840D sl (All versions). The authentication protocol between a client and a PLC via port 102/tcp (ISO-TSAP) insufficiently protects the transmitted password. This could allow an attacker that is able to intercept the network traffic to obtain valid PLC credentials.

Affected (CNA)

Vendor / productVersions
Siemens / SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)affected All versions
Siemens / SIMATIC S7-400 CPU family (incl. SIPLUS variants)affected All versions
Siemens / SIMATIC WinAC RTX (F) 2010affected All versions
Siemens / SINUMERIK 840D slaffected All versions

CWE

CWE-522

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.