In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions.
2021-03-10T18:15:12.797
2024-11-21T05:21:32.823
Modified
CVSSv3.1: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:N/I:P/A:N
10.0
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | siemens | simatic_mv420_firmware | < 7.0.6 | Yes |
Hardware | siemens | simatic_mv420 | - | No |
Operating System | siemens | simatic_mv440_firmware | < 7.0.6 | Yes |
Hardware | siemens | simatic_mv440 | - | No |