Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-28397

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7 PLCSIM Advanced (All versions > V2 < V4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (Version V4.4), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions > V2.5 < V2.9.2), SIMATIC S7-1500 Software Controller (All versions > V2.5 < V21.9), TIM 1531 IRC (incl. SIPLUS NET variants) (Version V2.1). Due to an incorrect authorization check in the affected component, an attacker could extract information about access protected PLC program variables over port 102/tcp from an affected device when reading multiple attributes at once.

Published

2021-08-10T11:15:07.423

Last Modified

2024-11-21T05:22:43.247

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-863
  • Type: Primary
    CWE-863
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System siemens cpu_1504d_tf_firmware < 2.9.2 Yes
Hardware siemens cpu_1504d_tf - No
Operating System siemens cpu_1507d_tf_firmware < 2.9.2 Yes
Hardware siemens cpu_1507d_tf - No
Operating System siemens cpu_1515sp_pc2_tf_firmware < 21.9 Yes
Hardware siemens cpu_1515sp_pc2_tf - No
Operating System siemens simatic_s7_plcsim_advanced_firmware < 4.0 Yes
Hardware siemens simatic_s7_plcsim_advanced - No
Application siemens simatic_s7-1500_software_controller < 21.9 Yes
Operating System siemens tim_1531_irc_firmware 2.1 Yes
Hardware siemens tim_1531_irc - No
Operating System siemens cpu_1211c_firmware 4.4 Yes
Hardware siemens cpu_1211c - No
Operating System siemens cpu_1212c_firmware 4.4 Yes
Hardware siemens cpu_1212c - No
Operating System siemens cpu_1212fc_firmware 4.4 Yes
Hardware siemens cpu_1212fc - No
Operating System siemens cpu_1214fc_firmware 4.4 Yes
Hardware siemens cpu_1214fc - No
Operating System siemens cpu_1214c_firmware 4.4 Yes
Hardware siemens cpu_1214c - No
Operating System siemens cpu_1215fc_firmware 4.4 Yes
Hardware siemens cpu_1215fc - No
Operating System siemens cpu_1215c_firmware 4.4 Yes
Hardware siemens cpu_1215c - No
Operating System siemens cpu_1217c_firmware 4.4 Yes
Hardware siemens cpu_1217c - No
Operating System siemens siplus_cpu_1510sp_f-1pn_firmware < 2.9.2 Yes
Hardware siemens siplus_cpu_1510sp_f-1pn - No
Operating System siemens siplus_cpu_1511-1_pn_firmware < 2.9.2 Yes
Hardware siemens siplus_cpu_1511-1_pn - No
Operating System siemens siplus_cpu_1511-1_pn_firmware < 2.9.2 Yes
Hardware siemens siplus_cpu_1511-1_pn - No
Operating System siemens siplus_cpu_1511f-1_pn_firmware < 2.9.2 Yes
Hardware siemens siplus_cpu_1511f-1_pn - No
Operating System siemens siplus_cpu_1512sp-1_pn_firmware < 2.9.2 Yes
Hardware siemens siplus_cpu_1512sp-1_pn - No
Operating System siemens siplus_cpu_1512sp_f-1pn_firmware < 2.9.2 Yes
Hardware siemens siplus_cpu_1512sp_f-1pn - No
Operating System siemens siplus_cpu_1513-1_pn_firmware < 2.9.2 Yes
Hardware siemens siplus_cpu_1513-1_pn - No
Operating System siemens siplus_cpu_1513-1_pn_firmware < 2.9.2 Yes
Hardware siemens siplus_cpu_1513-1_pn - No
Operating System siemens siplus_cpu_1513f-1_pn_firmware < 2.9.2 Yes
Hardware siemens siplus_cpu_1513f-1_pn - No
Operating System siemens siplus_cpu_1516-3_pn\/dp_firmware < 2.9.2 Yes
Hardware siemens siplus_cpu_1516-3_pn\/dp - No
Operating System siemens siplus_cpu_1516-3_pn\/dp_firmware < 2.9.2 Yes
Hardware siemens siplus_cpu_1516-3_pn\/dp - No
Operating System siemens siplus_cpu-1516f-3_pn\/dp_firmware < 2.9.2 Yes
Hardware siemens siplus_cpu-1516f-3_pn\/dp - No
Operating System siemens siplus_cpu_1518-4_pn\/dp_firmware < 2.9.2 Yes
Hardware siemens siplus_cpu_1518-4_pn\/dp - No
Operating System siemens siplus_cpu_1518f-4_pn\/dp_firmware < 2.9.2 Yes
Hardware siemens siplus_cpu_1518f-4_pn\/dp - No
Operating System siemens cpu_1510sp-1pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1510sp-1pn - No
Operating System siemens cpu1510sp_f-1_firmware < 2.9.2 Yes
Hardware siemens cpu1510sp_f-1 - No
Operating System siemens cpu_1511-1pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1511-1pn - No
Operating System siemens cpu_1511-1pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1511-1pn - No
Operating System siemens cpu_1511c-1_pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1511c-1_pn - No
Operating System siemens cpu_1511f-1pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1511f-1pn - No
Operating System siemens cpu_1511t-1pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1511t-1pn - No
Operating System siemens cpu_1511tf-1pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1511tf-1pn - No
Operating System siemens cpu_1512c-1_pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1512c-1_pn - No
Operating System siemens cpu_1512sp-1_pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1512sp-1_pn - No
Operating System siemens cpu_1512sp_f-1_pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1512sp_f-1_pn - No
Operating System siemens cpu_1513-1_pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1513-1_pn - No
Operating System siemens cpu_1513f-1_pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1513f-1_pn - No
Operating System siemens cpu_1513r-1_pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1513r-1_pn - No
Operating System siemens cpu_1513pro_f-2_pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1513pro_f-2_pn - No
Operating System siemens cpu_1515-2_firmware < 2.9.2 Yes
Hardware siemens cpu_1515-2 - No
Operating System siemens cpu_1515f-2_firmware < 2.9.2 Yes
Hardware siemens cpu_1515f-2 - No
Operating System siemens cpu_1515r-2_pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1515r-2_pn - No
Operating System siemens cpu_1515t-2_pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1515t-2_pn - No
Operating System siemens cpu_1515tf-2_pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1515tf-2_pn - No
Operating System siemens cpu_1516pro_f-2_pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1516pro_f-2_pn - No
Operating System siemens cpu_1516pro-2_pn_firmware < 2.9.2 Yes
Hardware siemens cpu_1516pro-2_pn - No
Operating System siemens cpu_1516-3_firmware < 2.9.2 Yes
Hardware siemens cpu_1516-3 - No
Operating System siemens cpu_1516f-3_firmware < 2.9.2. Yes
Hardware siemens cpu_1516f-3 - No
Operating System siemens cpu_1516t-3_pn\/dp_firmware < 2.9.2 Yes
Hardware siemens cpu_1516t-3_pn\/dp - No
Operating System siemens cpu_1516tf-3_pn\/dp_firmware < 2.9.2 Yes
Hardware siemens cpu_1516tf-3_pn\/dp - No
Operating System siemens cpu_1517-3_pn\/dp_firmware < 2.9.2 Yes
Hardware siemens cpu_1517-3_pn\/dp - No
Operating System siemens cpu_1517f-3_pn\/dp_firmware < 2.9.2 Yes
Hardware siemens cpu_1517f-3_pn\/dp - No
Operating System siemens cpu_1517t-3_pn\/dp_firmware < 2.9.2 Yes
Hardware siemens cpu_1517t-3_pn\/dp - No
Operating System siemens cpu_1517tf-3_pn\/dp_firmware < 2.9.2 Yes
Hardware siemens cpu_1517tf-3_pn\/dp - No
Operating System siemens cpu_1518-4_pn\/dp_firmware < 2.9.2 Yes
Hardware siemens cpu_1518-4_pn\/dp - No
Operating System siemens cpu_1518f-4_pn\/dp_firmware < 2.9.2 Yes
Hardware siemens cpu_1518f-4_pn\/dp - No
References