CVE-2020-28397
Summary
| CVE | CVE-2020-28397 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-08-10 11:15:00 UTC |
| Updated | 2021-12-10 19:57:00 UTC |
| Description | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7 PLCSIM Advanced (All versions > V2 < V4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (Version V4.4), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions > V2.5 < V2.9.2), SIMATIC S7-1500 Software Controller (All versions > V2.5 < V21.9), TIM 1531 IRC (incl. SIPLUS NET variants) (Version V2.1). Due to an incorrect authorization check in the affected component, an attacker could extract information about access protected PLC program variables over port 102/tcp from an affected device when reading multiple attributes at once. |
Risk And Classification
Problem Types: CWE-863
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Siemens | Cpu1510sp F-1 | - | All | All | All |
| Operating System | Siemens | Cpu1510sp F-1 Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1211c | - | All | All | All |
| Operating System | Siemens | Cpu 1211c Firmware | 4.4 | All | All | All |
| Hardware | Siemens | Cpu 1212c | - | All | All | All |
| Operating System | Siemens | Cpu 1212c Firmware | 4.4 | All | All | All |
| Hardware | Siemens | Cpu 1212fc | - | All | All | All |
| Operating System | Siemens | Cpu 1212fc Firmware | 4.4 | All | All | All |
| Hardware | Siemens | Cpu 1214c | - | All | All | All |
| Operating System | Siemens | Cpu 1214c Firmware | 4.4 | All | All | All |
| Hardware | Siemens | Cpu 1214fc | - | All | All | All |
| Operating System | Siemens | Cpu 1214fc Firmware | 4.4 | All | All | All |
| Hardware | Siemens | Cpu 1215c | - | All | All | All |
| Operating System | Siemens | Cpu 1215c Firmware | 4.4 | All | All | All |
| Hardware | Siemens | Cpu 1215fc | - | All | All | All |
| Operating System | Siemens | Cpu 1215fc Firmware | 4.4 | All | All | All |
| Hardware | Siemens | Cpu 1217c | - | All | All | All |
| Operating System | Siemens | Cpu 1217c Firmware | 4.4 | All | All | All |
| Hardware | Siemens | Cpu 1504d Tf | - | All | All | All |
| Operating System | Siemens | Cpu 1504d Tf Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1507d Tf | - | All | All | All |
| Operating System | Siemens | Cpu 1507d Tf Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1510sp-1pn | - | All | All | All |
| Operating System | Siemens | Cpu 1510sp-1pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1511-1pn | - | All | All | All |
| Operating System | Siemens | Cpu 1511-1pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1511c-1 Pn | - | All | All | All |
| Operating System | Siemens | Cpu 1511c-1 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1511f-1pn | - | All | All | All |
| Operating System | Siemens | Cpu 1511f-1pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1511t-1pn | - | All | All | All |
| Operating System | Siemens | Cpu 1511t-1pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1511tf-1pn | - | All | All | All |
| Operating System | Siemens | Cpu 1511tf-1pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1512c-1 Pn | - | All | All | All |
| Operating System | Siemens | Cpu 1512c-1 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1512sp-1 Pn | - | All | All | All |
| Operating System | Siemens | Cpu 1512sp-1 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1512sp F-1 Pn | - | All | All | All |
| Operating System | Siemens | Cpu 1512sp F-1 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1513-1 Pn | - | All | All | All |
| Operating System | Siemens | Cpu 1513-1 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1513f-1 Pn | - | All | All | All |
| Operating System | Siemens | Cpu 1513f-1 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1513pro F-2 Pn | - | All | All | All |
| Operating System | Siemens | Cpu 1513pro F-2 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1513r-1 Pn | - | All | All | All |
| Operating System | Siemens | Cpu 1513r-1 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1515-2 | - | All | All | All |
| Operating System | Siemens | Cpu 1515-2 Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1515f-2 | - | All | All | All |
| Operating System | Siemens | Cpu 1515f-2 Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1515r-2 Pn | - | All | All | All |
| Operating System | Siemens | Cpu 1515r-2 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1515sp Pc2 Tf | - | All | All | All |
| Operating System | Siemens | Cpu 1515sp Pc2 Tf Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1515t-2 Pn | - | All | All | All |
| Operating System | Siemens | Cpu 1515t-2 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1515tf-2 Pn | - | All | All | All |
| Operating System | Siemens | Cpu 1515tf-2 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1516-3 | - | All | All | All |
| Operating System | Siemens | Cpu 1516-3 Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1516f-3 | - | All | All | All |
| Operating System | Siemens | Cpu 1516f-3 Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1516pro-2 Pn | - | All | All | All |
| Operating System | Siemens | Cpu 1516pro-2 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1516pro F-2 Pn | - | All | All | All |
| Operating System | Siemens | Cpu 1516pro F-2 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1516t-3 Pn/dp | - | All | All | All |
| Operating System | Siemens | Cpu 1516t-3 Pn/dp Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1516tf-3 Pn/dp | - | All | All | All |
| Operating System | Siemens | Cpu 1516tf-3 Pn/dp Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1517-3 Pn/dp | - | All | All | All |
| Operating System | Siemens | Cpu 1517-3 Pn/dp Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1517f-3 Pn/dp | - | All | All | All |
| Operating System | Siemens | Cpu 1517f-3 Pn/dp Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1517t-3 Pn/dp | - | All | All | All |
| Operating System | Siemens | Cpu 1517t-3 Pn/dp Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1517tf-3 Pn/dp | - | All | All | All |
| Operating System | Siemens | Cpu 1517tf-3 Pn/dp Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1518-4 Pn/dp | - | All | All | All |
| Operating System | Siemens | Cpu 1518-4 Pn/dp Firmware | All | All | All | All |
| Hardware | Siemens | Cpu 1518f-4 Pn/dp | - | All | All | All |
| Operating System | Siemens | Cpu 1518f-4 Pn/dp Firmware | All | All | All | All |
| Application | Siemens | Simatic S7-1500 Software Controller | All | All | All | All |
| Hardware | Siemens | Simatic S7 Plcsim Advanced | - | All | All | All |
| Operating System | Siemens | Simatic S7 Plcsim Advanced Firmware | All | All | All | All |
| Hardware | Siemens | Siplus Cpu-1516f-3 Pn/dp | - | All | All | All |
| Operating System | Siemens | Siplus Cpu-1516f-3 Pn/dp Firmware | All | All | All | All |
| Hardware | Siemens | Siplus Cpu 1510sp F-1pn | - | All | All | All |
| Operating System | Siemens | Siplus Cpu 1510sp F-1pn Firmware | All | All | All | All |
| Hardware | Siemens | Siplus Cpu 1511-1 Pn | - | All | All | All |
| Operating System | Siemens | Siplus Cpu 1511-1 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Siplus Cpu 1511f-1 Pn | - | All | All | All |
| Operating System | Siemens | Siplus Cpu 1511f-1 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Siplus Cpu 1512sp-1 Pn | - | All | All | All |
| Operating System | Siemens | Siplus Cpu 1512sp-1 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Siplus Cpu 1512sp F-1pn | - | All | All | All |
| Operating System | Siemens | Siplus Cpu 1512sp F-1pn Firmware | All | All | All | All |
| Hardware | Siemens | Siplus Cpu 1513-1 Pn | - | All | All | All |
| Operating System | Siemens | Siplus Cpu 1513-1 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Siplus Cpu 1513f-1 Pn | - | All | All | All |
| Operating System | Siemens | Siplus Cpu 1513f-1 Pn Firmware | All | All | All | All |
| Hardware | Siemens | Siplus Cpu 1516-3 Pn/dp | - | All | All | All |
| Operating System | Siemens | Siplus Cpu 1516-3 Pn/dp Firmware | All | All | All | All |
| Hardware | Siemens | Siplus Cpu 1518-4 Pn/dp | - | All | All | All |
| Operating System | Siemens | Siplus Cpu 1518-4 Pn/dp Firmware | All | All | All | All |
| Hardware | Siemens | Siplus Cpu 1518f-4 Pn/dp | - | All | All | All |
| Operating System | Siemens | Siplus Cpu 1518f-4 Pn/dp Firmware | All | All | All | All |
| Hardware | Siemens | Tim 1531 Irc | - | All | All | All |
| Operating System | Siemens | Tim 1531 Irc Firmware | 2.1 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| cert-portal.siemens.com/productcert/pdf/ssa-865327.pdf | MISC | cert-portal.siemens.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 591253 Siemens SIMATIC Controllers and TIM Incorrect Authorization Vulnerability (ICSA-21-257-23, SSA-865327)