MEDIUM🇵🇱 Wersja polska

CVE-2020-15791

CVSS 6.5v3.1pub. 2020-09-09upd. 2026-06-02

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX (F) 2010 (All versions), SINUMERIK 840D sl (All versions). The authentication protocol between a client and a PLC via port 102/tcp (ISO-TSAP) insufficiently protects the transmitted password. This could allow an attacker that is able to intercept the network traffic to obtain valid PLC credentials.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Siemens Simatic S7 300 Cpu 312

    HW
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 312 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 314

    HW
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 314 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 315 2 Dp

    HW
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 315 2 Dp Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 315 2 Pn

    HW
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 315 2 Pn Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 315f 2 Dp

    HW
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 315f 2 Dp Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 315f 2 Pn

    HW
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 315f 2 Pn Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 317 2 Dp

    HW
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 317 2 Dp Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 317 2 Pn

    HW
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 317 2 Pn Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 317f 2 Dp

    HW
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 317f 2 Dp Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 317f 2 Pn

    HW
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu 317f 2 Pn Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 400 Cpu 412

    HW
    Siemens
    all versions

  • Siemens Simatic S7 400 Cpu 412 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 400 Cpu 414

    HW
    Siemens
    all versions

  • Siemens Simatic S7 400 Cpu 414 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 400 Cpu 416

    HW
    Siemens
    all versions

  • Siemens Simatic S7 400 Cpu 416 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 400 Cpu 417

    HW
    Siemens
    all versions

  • Siemens Simatic S7 400 Cpu 417 Firmware

    OS
    Siemens
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-15783HIGH7.5same product

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants...

CVE-2019-18336HIGH7.5same product

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants...

CVE-2019-10936HIGH7.5same product

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unau...

CVE-2019-10923HIGH7.5same product

An attacker with network access to an affected product may cause a denial of service condition by breaking the...

CVE-2016-9158HIGH7.5same product

A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (in...