CVE-2020-15791mediumCWE-522

CVE-2020-15791: falha de média gravidade em Siemens SIMATIC S7-300 CPU family (incl.

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SINUMERIK 840D sl+ Monitorar SIMATIC WinAC RTX

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.7%
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX (F) 2010 (All versions), SINUMERIK 840D sl (All versions). The authentication protocol between a client and a PLC via port 102/tcp (ISO-TSAP) insufficiently protects the transmitted password. This could allow an attacker that is able to intercept the network traffic to obtain valid PLC credentials.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Siemens · SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)Siemens · SIMATIC S7-400 CPU family (incl. SIPLUS variants)Siemens · SIMATIC WinAC RTX (F) 2010Siemens · SINUMERIK 840D sl
CVEs relacionadas — Siemens SIMATIC S7-300 CPU family (incl.

No mesmo produto, das mais perigosas para as menos.

CVE-2017-12741HIGHCVE-2017-12741EPSS 3.3%CVE-2020-15783HIGHCVE-2020-15783EPSS 1.7%CVE-2017-2680HIGHCVE-2017-2680EPSS 1.1%CVE-2017-2681HIGHCVE-2017-2681EPSS 0.9%