CVE-2020-15791
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX (F) 2010 (All versions), SINUMERIK 840D sl (All versions). The authentication protocol between a client and a PLC via port 102/tcp (ISO-TSAP) insufficiently protects the transmitted password. This could allow an attacker that is able to intercept the network traffic to obtain valid PLC credentials.
Published:Sep 9, 2020
Last Modified:Jun 2, 2026
EPS:Sep 9, 2020
EPSS Score:0.00081
CVSS Score:6.5
Affected Products
Vendor
Product
Action
Vendor
Siemens
Product
Simatic S7-300 Cpu 312
Siemens
Simatic S7-300 Cpu 312
Vendor
Siemens
Product
Simatic S7-300 Cpu 312 Firmware
Siemens
Simatic S7-300 Cpu 312 Firmware
Vendor
Siemens
Product
Simatic S7-300 Cpu 314
Siemens
Simatic S7-300 Cpu 314
Vendor
Siemens
Product
Simatic S7-300 Cpu 314 Firmware
Siemens
Simatic S7-300 Cpu 314 Firmware
Vendor
Siemens
Product
Simatic S7-300 Cpu 315-2 Dp
Siemens
Simatic S7-300 Cpu 315-2 Dp
Vendor
Siemens
Product
Simatic S7-300 Cpu 315-2 Dp Firmware
Siemens
Simatic S7-300 Cpu 315-2 Dp Firmware
Vendor
Siemens
Product
Simatic S7-300 Cpu 315-2 Pn
Siemens
Simatic S7-300 Cpu 315-2 Pn
Vendor
Siemens
Product
Simatic S7-300 Cpu 315-2 Pn Firmware
Siemens
Simatic S7-300 Cpu 315-2 Pn Firmware
Vendor
Siemens
Product
Simatic S7-300 Cpu 315f-2 Dp
Siemens
Simatic S7-300 Cpu 315f-2 Dp
Vendor
Siemens
Product
Simatic S7-300 Cpu 315f-2 Dp Firmware
Siemens
Simatic S7-300 Cpu 315f-2 Dp Firmware
Vendor
Siemens
Product
Simatic S7-300 Cpu 315f-2 Pn
Siemens
Simatic S7-300 Cpu 315f-2 Pn
Vendor
Siemens
Product
Simatic S7-300 Cpu 315f-2 Pn Firmware
Siemens
Simatic S7-300 Cpu 315f-2 Pn Firmware
Vendor
Siemens
Product
Simatic S7-300 Cpu 317-2 Dp
Siemens
Simatic S7-300 Cpu 317-2 Dp
Vendor
Siemens
Product
Simatic S7-300 Cpu 317-2 Dp Firmware
Siemens
Simatic S7-300 Cpu 317-2 Dp Firmware
Vendor
Siemens
Product
Simatic S7-300 Cpu 317-2 Pn
Siemens
Simatic S7-300 Cpu 317-2 Pn
Vendor
Siemens
Product
Simatic S7-300 Cpu 317-2 Pn Firmware
Siemens
Simatic S7-300 Cpu 317-2 Pn Firmware
Vendor
Siemens
Product
Simatic S7-300 Cpu 317f-2 Dp
Siemens
Simatic S7-300 Cpu 317f-2 Dp
Vendor
Siemens
Product
Simatic S7-300 Cpu 317f-2 Dp Firmware
Siemens
Simatic S7-300 Cpu 317f-2 Dp Firmware
Vendor
Siemens
Product
Simatic S7-300 Cpu 317f-2 Pn
Siemens
Simatic S7-300 Cpu 317f-2 Pn
Vendor
Siemens
Product
Simatic S7-300 Cpu 317f-2 Pn Firmware
Siemens
Simatic S7-300 Cpu 317f-2 Pn Firmware
Vendor
Siemens
Product
Simatic S7-400 Cpu 412
Siemens
Simatic S7-400 Cpu 412
Vendor
Siemens
Product
Simatic S7-400 Cpu 412 Firmware
Siemens
Simatic S7-400 Cpu 412 Firmware
Vendor
Siemens
Product
Simatic S7-400 Cpu 414
Siemens
Simatic S7-400 Cpu 414
Vendor
Siemens
Product
Simatic S7-400 Cpu 414 Firmware
Siemens
Simatic S7-400 Cpu 414 Firmware
Vendor
Siemens
Product
Simatic S7-400 Cpu 416
Siemens
Simatic S7-400 Cpu 416
Vendor
Siemens
Product
Simatic S7-400 Cpu 416 Firmware
Siemens
Simatic S7-400 Cpu 416 Firmware
Vendor
Siemens
Product
Simatic S7-400 Cpu 417
Siemens
Simatic S7-400 Cpu 417
Vendor
Siemens
Product
Simatic S7-400 Cpu 417 Firmware
Siemens
Simatic S7-400 Cpu 417 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
