CVE-2020-15791

State: Published
Severity: 6.5 Medium
Published: Sep 9, 2020
Updated: Jun 2, 2026
Reserved: Jul 15, 2020

Description

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX (F) 2010 (All versions), SINUMERIK 840D sl (All versions). The authentication protocol between a client and a PLC via port 102/tcp (ISO-TSAP) insufficiently protects the transmitted password. This could allow an attacker that is able to intercept the network traffic to obtain valid PLC credentials.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	CISA-ADP

Weaknesses

CWE-522 Insufficiently Protected Credentials

Affected Products

Product	Versions
SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)Siemens	All versionsAffected
SIMATIC S7-400 CPU family (incl. SIPLUS variants)Siemens	All versionsAffected
SIMATIC WinAC RTX (F) 2010Siemens	All versionsAffected
SINUMERIK 840D slSiemens	All versionsAffected

References

https://cert-portal.siemens.com/productcert/pdf/ssa-381684.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.