Medium ICSA-20-252-02 1 CVE

Siemens SIMATIC S7-300 and S7-400 CPUs (Update C)

Published Sep 8, 2020 · Updated Dec 8, 2020 · Revision 4

Vendor: Siemens Product: SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) Product: SIMATIC S7-400 CPU family (incl. SIPLUS variants) Product: SIMATIC WinAC RTX F 2010 Product: SINUMERIK 840D sl

Summary

Successful exploitation of this vulnerability could result in credential disclosure.

Vulnerabilities 1

Medium 6.5

CVE-2020-15791

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All ve…

Siemens SIMATIC WinAC RTX F 2010 SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) SINUMERIK 840D sl ICS / OT

Sep 9, 2020

Revision history

2020-12-08 #4
ICSA-20-252-02 Siemens SIMATIC S7-300 and S7-400 CPUs (Update C)
2020-11-10 #3
ICSA-20-252-02 Siemens SIMATIC S7-300 and S7-400 CPUs (Update B)
2020-10-13 #2
ICSA-20-252-02 Siemens SIMATIC S7-300 and S7-400 CPUs (Update A)
2020-09-08 #1
ICSA-20-252-02 Siemens SIMATIC S7-300 and S7-400 CPUs

References

ICS Advisory ICSA-20-252-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-252-02
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B