Description
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7 PLCSIM Advanced (All versions > V2 < V4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (Version V4.4), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions > V2.5 < V2.9.2), SIMATIC S7-1500 Software Controller (All versions > V2.5 < V21.9), TIM 1531 IRC (incl. SIPLUS NET variants) (Version V2.1). Due to an incorrect authorization check in the affected component, an attacker could extract information about access protected PLC program variables over port 102/tcp from an affected device when reading multiple attributes at once.
Published: 2021-08-10
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2020-20856 A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7 PLCSIM Advanced (All versions > V2 < V4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (Version V4.4), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions > V2.5 < V2.9.2), SIMATIC S7-1500 Software Controller (All versions > V2.5 < V21.9), TIM 1531 IRC (incl. SIPLUS NET variants) (Version V2.1). Due to an incorrect authorization check in the affected component, an attacker could extract information about access protected PLC program variables over port 102/tcp from an affected device when reading multiple attributes at once.
History

No history.

Subscriptions

Siemens Cpu1510sp F-1 Cpu1510sp F-1 Firmware Cpu 1211c Cpu 1211c Firmware Cpu 1212c Cpu 1212c Firmware Cpu 1212fc Cpu 1212fc Firmware Cpu 1214c Cpu 1214c Firmware Cpu 1214fc Cpu 1214fc Firmware Cpu 1215c Cpu 1215c Firmware Cpu 1215fc Cpu 1215fc Firmware Cpu 1217c Cpu 1217c Firmware Cpu 1504d Tf Cpu 1504d Tf Firmware Cpu 1507d Tf Cpu 1507d Tf Firmware Cpu 1510sp-1pn Cpu 1510sp-1pn Firmware Cpu 1511-1pn Cpu 1511-1pn Firmware Cpu 1511c-1 Pn Cpu 1511c-1 Pn Firmware Cpu 1511f-1pn Cpu 1511f-1pn Firmware Cpu 1511t-1pn Cpu 1511t-1pn Firmware Cpu 1511tf-1pn Cpu 1511tf-1pn Firmware Cpu 1512c-1 Pn Cpu 1512c-1 Pn Firmware Cpu 1512sp-1 Pn Cpu 1512sp-1 Pn Firmware Cpu 1512sp F-1 Pn Cpu 1512sp F-1 Pn Firmware Cpu 1513-1 Pn Cpu 1513-1 Pn Firmware Cpu 1513f-1 Pn Cpu 1513f-1 Pn Firmware Cpu 1513pro F-2 Pn Cpu 1513pro F-2 Pn Firmware Cpu 1513r-1 Pn Cpu 1513r-1 Pn Firmware Cpu 1515-2 Cpu 1515-2 Firmware Cpu 1515f-2 Cpu 1515f-2 Firmware Cpu 1515r-2 Pn Cpu 1515r-2 Pn Firmware Cpu 1515sp Pc2 Tf Cpu 1515sp Pc2 Tf Firmware Cpu 1515t-2 Pn Cpu 1515t-2 Pn Firmware Cpu 1515tf-2 Pn Cpu 1515tf-2 Pn Firmware Cpu 1516-3 Cpu 1516-3 Firmware Cpu 1516f-3 Cpu 1516f-3 Firmware Cpu 1516pro-2 Pn Cpu 1516pro-2 Pn Firmware Cpu 1516pro F-2 Pn Cpu 1516pro F-2 Pn Firmware Cpu 1516t-3 Pn\/dp Cpu 1516t-3 Pn\/dp Firmware Cpu 1516tf-3 Pn\/dp Cpu 1516tf-3 Pn\/dp Firmware Cpu 1517-3 Pn\/dp Cpu 1517-3 Pn\/dp Firmware Cpu 1517f-3 Pn\/dp Cpu 1517f-3 Pn\/dp Firmware Cpu 1517t-3 Pn\/dp Cpu 1517t-3 Pn\/dp Firmware Cpu 1517tf-3 Pn\/dp Cpu 1517tf-3 Pn\/dp Firmware Cpu 1518-4 Pn\/dp Cpu 1518-4 Pn\/dp Firmware Cpu 1518f-4 Pn\/dp Cpu 1518f-4 Pn\/dp Firmware Simatic S7-1500 Software Controller Simatic S7 Plcsim Advanced Simatic S7 Plcsim Advanced Firmware Siplus Cpu-1516f-3 Pn\/dp Siplus Cpu-1516f-3 Pn\/dp Firmware Siplus Cpu 1510sp F-1pn Siplus Cpu 1510sp F-1pn Firmware Siplus Cpu 1511-1 Pn Siplus Cpu 1511-1 Pn Firmware Siplus Cpu 1511f-1 Pn Siplus Cpu 1511f-1 Pn Firmware Siplus Cpu 1512sp-1 Pn Siplus Cpu 1512sp-1 Pn Firmware Siplus Cpu 1512sp F-1pn Siplus Cpu 1512sp F-1pn Firmware Siplus Cpu 1513-1 Pn Siplus Cpu 1513-1 Pn Firmware Siplus Cpu 1513f-1 Pn Siplus Cpu 1513f-1 Pn Firmware Siplus Cpu 1516-3 Pn\/dp Siplus Cpu 1516-3 Pn\/dp Firmware Siplus Cpu 1518-4 Pn\/dp Siplus Cpu 1518-4 Pn\/dp Firmware Siplus Cpu 1518f-4 Pn\/dp Siplus Cpu 1518f-4 Pn\/dp Firmware Tim 1531 Irc Tim 1531 Irc Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published:

Updated: 2024-08-04T16:33:59.119Z

Reserved: 2020-11-10T00:00:00.000Z

Link: CVE-2020-28397

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-08-10T11:15:07.423

Modified: 2024-11-21T05:22:43.247

Link: CVE-2020-28397

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses