Medium severity6.5NVD Advisory· Published Sep 9, 2020· Updated Jun 17, 2026

CVE-2020-15791

Description

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX (F) 2010 (All versions), SINUMERIK 840D sl (All versions). The authentication protocol between a client and a PLC via port 102/tcp (ISO-TSAP) insufficiently protects the transmitted password. This could allow an attacker that is able to intercept the network traffic to obtain valid PLC credentials.

Affected products

Siemens Foundation/Simatic S7 300 Firmware6 versions
cpe:2.3:o:siemens:simatic_s7-300_cpu_312_firmware:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:siemens:simatic_s7-300_cpu_312_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_s7-300_cpu_314_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_s7-300_cpu_315-2_dp_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_s7-300_cpu_315-2_pn_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_s7-300_cpu_315f-2_pn_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_s7-300_cpu_317-2_pn_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Simatic S7 300 Cpu 315f 2 Dp Firmware
cpe:2.3:o:siemens:simatic_s7-300_cpu_315f-2_dp_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Simatic S7 300 Cpu 317f 2 Dp Firmware2 versions
cpe:2.3:o:siemens:simatic_s7-300_cpu_317-2_dp_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:siemens:simatic_s7-300_cpu_317-2_dp_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_s7-300_cpu_317f-2_dp_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Simatic S7 400 CPU Firmware3 versions
cpe:2.3:o:siemens:simatic_s7-300_cpu_317f-2_pn_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:siemens:simatic_s7-300_cpu_317f-2_pn_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_s7-400_cpu_416_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_s7-400_cpu_417_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Simatic S7 400 Firmware
cpe:2.3:o:siemens:simatic_s7-400_cpu_412_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Simatic S7 400 Cpu 414 Firmware
cpe:2.3:o:siemens:simatic_s7-400_cpu_414_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/SINUMERIK 840D slllm-create
Range: All versions
Siemens Foundation/SIMATIC S7-300 CPU familyllm-fuzzy
Range: All versions
Siemens Foundation/Simatic Winac Rtx F 2010llm-fuzzy2 versions
2010+ 1 more
- (no CPE)range: 2010
- (no CPE)range: All versions
Siemens Foundation/SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)cpe-rescue
Range: All versions
Siemens Foundation/SIMATIC S7-1200 CPU family (incl. SIPLUS variants)cpe-rescue
Range: All versions
Siemens Foundation/Sinumerik 840d Sl Firmwarecpe-rescue
Range: All versions

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2020-15791

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions