Description
In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions.
Advisories 3
- WID-SEC-2023-1987 TCP/IP Stack: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 7, 2023
- ICSA-21-042-01 Multiple Embedded TCP/IP Stacks (Update B) CISA ICS & IT advisories · Nov 11, 2021
- ICSA-21-068-07 Siemens TCP Stack of SIMATIC MV400 CISA ICS & IT advisories · Mar 9, 2021