CVE Feed

    Dashboard / CVE / CVE-2020-28397

    CVE-2020-28397

    A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7 PLCSIM Advanced (All versions > V2 < V4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (Version V4.4), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions > V2.5 < V2.9.2), SIMATIC S7-1500 Software Controller (All versions > V2.5 < V21.9), TIM 1531 IRC (incl. SIPLUS NET variants) (Version V2.1). Due to an incorrect authorization check in the affected component, an attacker could extract information about access protected PLC program variables over port 102/tcp from an affected device when reading multiple attributes at once.

    Published:Aug 10, 2021
    Last Modified:Nov 21, 2024
    EPS:Aug 10, 2021
    EPSS Score:0.00183
    CVSS Score:5.3

    Affected Products

    Vendor
    Siemens
    Product
    Cpu1510sp F-1
    Vendor
    Siemens
    Product
    Cpu1510sp F-1 Firmware
    Vendor
    Siemens
    Product
    Cpu 1211c
    Vendor
    Siemens
    Product
    Cpu 1211c Firmware
    Vendor
    Siemens
    Product
    Cpu 1212c
    Vendor
    Siemens
    Product
    Cpu 1212c Firmware
    Vendor
    Siemens
    Product
    Cpu 1212fc
    Vendor
    Siemens
    Product
    Cpu 1212fc Firmware
    Vendor
    Siemens
    Product
    Cpu 1214c
    Vendor
    Siemens
    Product
    Cpu 1214c Firmware
    Vendor
    Siemens
    Product
    Cpu 1214fc
    Vendor
    Siemens
    Product
    Cpu 1214fc Firmware
    Vendor
    Siemens
    Product
    Cpu 1215c
    Vendor
    Siemens
    Product
    Cpu 1215c Firmware
    Vendor
    Siemens
    Product
    Cpu 1215fc
    Vendor
    Siemens
    Product
    Cpu 1215fc Firmware
    Vendor
    Siemens
    Product
    Cpu 1217c
    Vendor
    Siemens
    Product
    Cpu 1217c Firmware
    Vendor
    Siemens
    Product
    Cpu 1504d Tf
    Vendor
    Siemens
    Product
    Cpu 1504d Tf Firmware
    Vendor
    Siemens
    Product
    Cpu 1507d Tf
    Vendor
    Siemens
    Product
    Cpu 1507d Tf Firmware
    Vendor
    Siemens
    Product
    Cpu 1510sp-1pn
    Vendor
    Siemens
    Product
    Cpu 1510sp-1pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1511-1pn
    Vendor
    Siemens
    Product
    Cpu 1511-1pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1511c-1 Pn
    Vendor
    Siemens
    Product
    Cpu 1511c-1 Pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1511f-1pn
    Vendor
    Siemens
    Product
    Cpu 1511f-1pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1511t-1pn
    Vendor
    Siemens
    Product
    Cpu 1511t-1pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1511tf-1pn
    Vendor
    Siemens
    Product
    Cpu 1511tf-1pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1512c-1 Pn
    Vendor
    Siemens
    Product
    Cpu 1512c-1 Pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1512sp-1 Pn
    Vendor
    Siemens
    Product
    Cpu 1512sp-1 Pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1512sp F-1 Pn
    Vendor
    Siemens
    Product
    Cpu 1512sp F-1 Pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1513-1 Pn
    Vendor
    Siemens
    Product
    Cpu 1513-1 Pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1513f-1 Pn
    Vendor
    Siemens
    Product
    Cpu 1513f-1 Pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1513pro F-2 Pn
    Vendor
    Siemens
    Product
    Cpu 1513pro F-2 Pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1513r-1 Pn
    Vendor
    Siemens
    Product
    Cpu 1513r-1 Pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1515-2
    Vendor
    Siemens
    Product
    Cpu 1515-2 Firmware
    Vendor
    Siemens
    Product
    Cpu 1515f-2
    Vendor
    Siemens
    Product
    Cpu 1515f-2 Firmware
    Vendor
    Siemens
    Product
    Cpu 1515r-2 Pn
    Vendor
    Siemens
    Product
    Cpu 1515r-2 Pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1515sp Pc2 Tf
    Vendor
    Siemens
    Product
    Cpu 1515sp Pc2 Tf Firmware
    Vendor
    Siemens
    Product
    Cpu 1515t-2 Pn
    Vendor
    Siemens
    Product
    Cpu 1515t-2 Pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1515tf-2 Pn
    Vendor
    Siemens
    Product
    Cpu 1515tf-2 Pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1516-3
    Vendor
    Siemens
    Product
    Cpu 1516-3 Firmware
    Vendor
    Siemens
    Product
    Cpu 1516f-3
    Vendor
    Siemens
    Product
    Cpu 1516f-3 Firmware
    Vendor
    Siemens
    Product
    Cpu 1516pro-2 Pn
    Vendor
    Siemens
    Product
    Cpu 1516pro-2 Pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1516pro F-2 Pn
    Vendor
    Siemens
    Product
    Cpu 1516pro F-2 Pn Firmware
    Vendor
    Siemens
    Product
    Cpu 1516t-3 Pn\/dp
    Vendor
    Siemens
    Product
    Cpu 1516t-3 Pn\/dp Firmware
    Vendor
    Siemens
    Product
    Cpu 1516tf-3 Pn\/dp
    Vendor
    Siemens
    Product
    Cpu 1516tf-3 Pn\/dp Firmware
    Vendor
    Siemens
    Product
    Cpu 1517-3 Pn\/dp
    Vendor
    Siemens
    Product
    Cpu 1517-3 Pn\/dp Firmware
    Vendor
    Siemens
    Product
    Cpu 1517f-3 Pn\/dp
    Vendor
    Siemens
    Product
    Cpu 1517f-3 Pn\/dp Firmware
    Vendor
    Siemens
    Product
    Cpu 1517t-3 Pn\/dp
    Vendor
    Siemens
    Product
    Cpu 1517t-3 Pn\/dp Firmware
    Vendor
    Siemens
    Product
    Cpu 1517tf-3 Pn\/dp
    Vendor
    Siemens
    Product
    Cpu 1517tf-3 Pn\/dp Firmware
    Vendor
    Siemens
    Product
    Cpu 1518-4 Pn\/dp
    Vendor
    Siemens
    Product
    Cpu 1518-4 Pn\/dp Firmware
    Vendor
    Siemens
    Product
    Cpu 1518f-4 Pn\/dp
    Vendor
    Siemens
    Product
    Cpu 1518f-4 Pn\/dp Firmware
    Vendor
    Siemens
    Product
    Simatic S7-1500 Software Controller
    Vendor
    Siemens
    Product
    Simatic S7 Plcsim Advanced
    Vendor
    Siemens
    Product
    Simatic S7 Plcsim Advanced Firmware
    Vendor
    Siemens
    Product
    Siplus Cpu-1516f-3 Pn\/dp
    Vendor
    Siemens
    Product
    Siplus Cpu-1516f-3 Pn\/dp Firmware
    Vendor
    Siemens
    Product
    Siplus Cpu 1510sp F-1pn
    Vendor
    Siemens
    Product
    Siplus Cpu 1510sp F-1pn Firmware
    Vendor
    Siemens
    Product
    Siplus Cpu 1511-1 Pn
    Vendor
    Siemens
    Product
    Siplus Cpu 1511-1 Pn Firmware
    Vendor
    Siemens
    Product
    Siplus Cpu 1511f-1 Pn
    Vendor
    Siemens
    Product
    Siplus Cpu 1511f-1 Pn Firmware
    Vendor
    Siemens
    Product
    Siplus Cpu 1512sp-1 Pn
    Vendor
    Siemens
    Product
    Siplus Cpu 1512sp-1 Pn Firmware
    Vendor
    Siemens
    Product
    Siplus Cpu 1512sp F-1pn
    Vendor
    Siemens
    Product
    Siplus Cpu 1512sp F-1pn Firmware
    Vendor
    Siemens
    Product
    Siplus Cpu 1513-1 Pn
    Vendor
    Siemens
    Product
    Siplus Cpu 1513-1 Pn Firmware
    Vendor
    Siemens
    Product
    Siplus Cpu 1513f-1 Pn
    Vendor
    Siemens
    Product
    Siplus Cpu 1513f-1 Pn Firmware
    Vendor
    Siemens
    Product
    Siplus Cpu 1516-3 Pn\/dp
    Vendor
    Siemens
    Product
    Siplus Cpu 1516-3 Pn\/dp Firmware
    Vendor
    Siemens
    Product
    Siplus Cpu 1518-4 Pn\/dp
    Vendor
    Siemens
    Product
    Siplus Cpu 1518-4 Pn\/dp Firmware
    Vendor
    Siemens
    Product
    Siplus Cpu 1518f-4 Pn\/dp
    Vendor
    Siemens
    Product
    Siplus Cpu 1518f-4 Pn\/dp Firmware
    Vendor
    Siemens
    Product
    Tim 1531 Irc
    Vendor
    Siemens
    Product
    Tim 1531 Irc Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-863 Incorrect Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High