CVE-2020-15791
Description
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX (F) 2010 (All versions), SINUMERIK 840D sl (All versions). The authentication protocol between a client and a PLC via port 102/tcp (ISO-TSAP) insufficiently protects the transmitted password. This could allow an attacker that is able to intercept the network traffic to obtain valid PLC credentials.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens simatic_s7-300_cpu_312_firmware | No range specified | — |
| siemens simatic_s7-300_cpu_314_firmware | No range specified | — |
| siemens simatic_s7-300_cpu_315-2_dp_firmware | No range specified | — |
| siemens simatic_s7-300_cpu_315-2_pn_firmware | No range specified | — |
| siemens simatic_s7-300_cpu_317-2_pn_firmware | No range specified | — |
| siemens simatic_s7-300_cpu_317-2_dp_firmware | No range specified | — |
| siemens simatic_s7-300_cpu_315f-2_dp_firmware | No range specified | — |
| siemens simatic_s7-300_cpu_315f-2_pn_firmware | No range specified | — |
| siemens simatic_s7-300_cpu_317f-2_pn_firmware | No range specified | — |
| siemens simatic_s7-300_cpu_317f-2_dp_firmware | No range specified | — |
| siemens simatic_s7-400_cpu_412_firmware | No range specified | — |
| siemens simatic_s7-400_cpu_414_firmware | No range specified | — |
| siemens simatic_s7-400_cpu_416_firmware | No range specified | — |
| siemens simatic_s7-400_cpu_417_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.