Riskcovery

CVE-2021-37186

State
Published
Severity
Not scored
Published
Sep 14, 2021
Updated
Aug 4, 2024
Reserved
Jul 21, 2021

Read the record on cve.org

Description

A vulnerability has been identified in LOGO! CMR2020 (All versions < V2.2), LOGO! CMR2040 (All versions < V2.2), SIMATIC RTU3010C (All versions < V4.0.9), SIMATIC RTU3030C (All versions < V4.0.9), SIMATIC RTU3031C (All versions < V4.0.9), SIMATIC RTU3041C (All versions < V4.0.9). The underlying TCP/IP stack does not properly calculate the random numbers used as ISN (Initial Sequence Numbers). An adjacent attacker with network access to the LAN interface could interfere with traffic, spoof the connection and gain access to sensitive information.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-330 Use of Insufficiently Random Values

Affected Products

ProductVersions
LOGO! CMR2020Siemens
  • All versions < V2.2Affected
LOGO! CMR2040Siemens
  • All versions < V2.2Affected
SIMATIC RTU3010CSiemens
  • All versions < V4.0.9Affected
SIMATIC RTU3030CSiemens
  • All versions < V4.0.9Affected
SIMATIC RTU3031CSiemens
  • All versions < V4.0.9Affected
SIMATIC RTU3041CSiemens
  • All versions < V4.0.9Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.