CVE-2020-15791
Severity Score
6.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX (F) 2010 (All versions), SINUMERIK 840D sl (All versions). The authentication protocol between a client and a PLC via port 102/tcp (ISO-TSAP) insufficiently protects the transmitted password. This could allow an attacker that is able to intercept the network traffic to obtain valid PLC credentials.
Se ha identificado una vulnerabilidad en la familia de SIMATIC S7-300 CPU (incluyendo las CPU ET200 relacionadas y las variantes SIPLUS) (Todas las versiones), familia SIMATIC S7-400 CPU (incluyendo las variantes SIPLUS) (Todas las versiones), SIMATIC WinAC RTX (F) 2010 (Todas las versiones), SINUMERIK 840D sl (Todas las versiones). El protocolo de autenticación entre un cliente y un PLC por medio del puerto 102/tcp (ISO-TSAP) no protege suficientemente la contraseña transmitida. Esto podría permitir a un atacante que pueda interceptar el tráfico de red obtener credenciales del PLC válidas
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-07-15 CVE Reserved
- 2020-09-09 CVE Published
- 2023-05-26 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-522: Insufficiently Protected Credentials
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-381684.pdf | 2020-12-14 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 312 Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu 312 Firmware" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 312 Search vendor "Siemens" for product "Simatic S7-300 Cpu 312" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 314 Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu 314 Firmware" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 314 Search vendor "Siemens" for product "Simatic S7-300 Cpu 314" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 315-2 Dp Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu 315-2 Dp Firmware" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 315-2 Dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 315-2 Dp" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 315-2 Pn Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu 315-2 Pn Firmware" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 315-2 Pn Search vendor "Siemens" for product "Simatic S7-300 Cpu 315-2 Pn" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 317-2 Pn Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu 317-2 Pn Firmware" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 317-2 Pn Search vendor "Siemens" for product "Simatic S7-300 Cpu 317-2 Pn" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 317-2 Dp Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu 317-2 Dp Firmware" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 317-2 Dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 317-2 Dp" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 315f-2 Dp Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu 315f-2 Dp Firmware" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 315f-2 Dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 315f-2 Dp" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 315f-2 Pn Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu 315f-2 Pn Firmware" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 315f-2 Pn Search vendor "Siemens" for product "Simatic S7-300 Cpu 315f-2 Pn" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 317f-2 Pn Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu 317f-2 Pn Firmware" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 317f-2 Pn Search vendor "Siemens" for product "Simatic S7-300 Cpu 317f-2 Pn" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 317f-2 Dp Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu 317f-2 Dp Firmware" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 317f-2 Dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 317f-2 Dp" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 412 Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu 412 Firmware" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 412 Search vendor "Siemens" for product "Simatic S7-400 Cpu 412" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 414 Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu 414 Firmware" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 414 Search vendor "Siemens" for product "Simatic S7-400 Cpu 414" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 416 Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu 416 Firmware" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 416 Search vendor "Siemens" for product "Simatic S7-400 Cpu 416" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 417 Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu 417 Firmware" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 417 Search vendor "Siemens" for product "Simatic S7-400 Cpu 417" | - | - |
Safe
|