CVE-2020-15791
Description
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX (F) 2010 (All versions), SINUMERIK 840D sl (All versions). The authentication protocol between a client and a PLC via port 102/tcp (ISO-TSAP) insufficiently protects the transmitted password. This could allow an attacker that is able to intercept the network traffic to obtain valid PLC credentials.
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| siemens | simatic_s7-300_cpu_312 | - | |
| siemens | simatic_s7-300_cpu_314 | - | |
| siemens | simatic_s7-300_cpu_315-2_dp | - | |
| siemens | simatic_s7-300_cpu_315-2_pn | - | |
| siemens | simatic_s7-300_cpu_317-2_pn | - | |
| siemens | simatic_s7-300_cpu_317-2_dp | - | |
| siemens | simatic_s7-300_cpu_315f-2_dp | - | |
| siemens | simatic_s7-300_cpu_315f-2_pn | - | |
| siemens | simatic_s7-300_cpu_317f-2_pn | - | |
| siemens | simatic_s7-300_cpu_317f-2_dp | - | |
| siemens | simatic_s7-400_cpu_412 | - | |
| siemens | simatic_s7-400_cpu_414 | - | |
| siemens | simatic_s7-400_cpu_416 | - | |
| siemens | simatic_s7-400_cpu_417 | - | |
References
CWEs
CWE-522
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.