Description (CNA)
A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3 (All versions < V3.92), blueplanet 105 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 110 TL3 (All versions < V3.92), blueplanet 125 NX3 M10 (All versions), blueplanet 125 TL3 (All versions < V3.92), blueplanet 125 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 137 TL3 (All versions < V3.92), blueplanet 150 TL3 (All versions < V3.92), blueplanet 150 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 155 TL3 (All versions < V3.92), blueplanet 155 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 165 TL3 (All versions < V3.92), blueplanet 165 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 3.0 TL3-60.0 TL3 (All versions), blueplanet 87.0 TL3 (All versions < V3.92), blueplanet 87.0 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 92.0 TL3 (All versions < V3.92), blueplanet 92.0 TL3 GEN2 (All versions < V6.1.4.9), blueplanet gridsave 110 TL3-S (All versions < V3.91), blueplanet gridsave 137 TL3-S (All versions < V3.91), blueplanet gridsave 92.0 TL3-S (All versions < V3.91). A CRC16-based algorithm for generating Technical Service credentials could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / blueplanet 100 NX3 M8 | affected 0 before * |
| Siemens / blueplanet 100 TL3 GEN2 | affected 0 before V6.1.4.9 |
| Siemens / blueplanet 105 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 105 TL3 GEN2 | affected 0 before V6.1.4.9 |
| Siemens / blueplanet 110 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 125 NX3 M10 | affected 0 before * |
| Siemens / blueplanet 125 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 125 TL3 GEN2 | affected 0 before V6.1.4.9 |
| Siemens / blueplanet 137 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 150 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 150 TL3 GEN2 | affected 0 before V6.1.4.9 |
| Siemens / blueplanet 155 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 155 TL3 GEN2 | affected 0 before V6.1.4.9 |
| Siemens / blueplanet 165 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 165 TL3 GEN2 | affected 0 before V6.1.4.9 |
| Siemens / blueplanet 25.0 NX3-33.0 NX3 | unaffected 0 before * |
| Siemens / blueplanet 3.0 NX3-20.0 NX3 | unaffected 0 before * |
| Siemens / blueplanet 3.0 TL3-60.0 TL3 | affected 0 before * |
| Siemens / blueplanet 3.0-5.0 NX1 | unaffected 0 before * |
| Siemens / blueplanet 360 NX3 M6 | unaffected 0 before * |
| Siemens / blueplanet 50.0 NX3-60.0 NX3 | unaffected 0 before * |
| Siemens / blueplanet 87.0 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 87.0 TL3 GEN2 | affected 0 before V6.1.4.9 |
| Siemens / blueplanet 92.0 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 92.0 TL3 GEN2 | affected 0 before V6.1.4.9 |
| Siemens / blueplanet gridsave 110 TL3-S | affected 0 before V3.91 |
| Siemens / blueplanet gridsave 137 TL3-S | affected 0 before V3.91 |
| Siemens / blueplanet gridsave 92.0 TL3-S | affected 0 before V3.91 |
| Siemens / blueplanet hybrid 10.0 TL3 | unaffected 0 before * |
| Siemens / blueplanet hybrid 6.0 NH3-12.0 NH3 | unaffected 0 before * |
CWE
CWE-321
References
ADP enrichment
No English description supplied.
No references supplied.