Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-37186

A vulnerability has been identified in LOGO! CMR2020 (All versions < V2.2), LOGO! CMR2040 (All versions < V2.2), SIMATIC RTU3010C (All versions < V4.0.9), SIMATIC RTU3030C (All versions < V4.0.9), SIMATIC RTU3031C (All versions < V4.0.9), SIMATIC RTU3041C (All versions < V4.0.9). The underlying TCP/IP stack does not properly calculate the random numbers used as ISN (Initial Sequence Numbers). An adjacent attacker with network access to the LAN interface could interfere with traffic, spoof the connection and gain access to sensitive information.

Published

2021-09-14T11:15:25.850

Last Modified

2024-11-21T06:14:49.183

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:P/I:P/A:N

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

6.5

Impact Score

4.9

Weaknesses
  • Type: Secondary
    CWE-330
  • Type: Primary
    CWE-330
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System siemens logo\!_cmr2020_firmware < 2.2 Yes
Hardware siemens logo\!_cmr2020 - No
Operating System siemens logo\!_cmr2040_firmware < 2.2 Yes
Hardware siemens logo\!_cmr2040 - No
Operating System siemens simatic_rtu3010c_firmware < 4.0.9 Yes
Hardware siemens simatic_rtu3010c * No
Operating System siemens simatic_rtu3030c_firmware < 4.0.9 Yes
Hardware siemens simatic_rtu3030c * No
Operating System siemens simatic_rtu3031c_firmware < 4.0.9 Yes
Hardware siemens simatic_rtu3031c * No
Operating System siemens simatic_rtu3041c_firmware < 4.0.9 Yes
Hardware siemens simatic_rtu3041c * No
References