var-202103-0198
Vulnerability from variot
A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does not correctly validate the sequence number for incoming TCP RST packages. An attacker could exploit this to terminate arbitrary TCP sessions. SIMATIC MV400 The family contains a vulnerability in array index validation.Denial of service (DoS) It may be put into a state. Siemens SIMATIC MV400 is an industrial equipment of Germany's Siemens (Siemens) company. Used for optical identification.
An unspecified vulnerability exists in the Siemens SIMATIC MV400 series TCP protocol stack
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", affected_products: { "@id": "https://www.variotdbs.pl/ref/affected_products", }, configurations: { "@id": "https://www.variotdbs.pl/ref/configurations", }, credits: { "@id": "https://www.variotdbs.pl/ref/credits", }, cvss: { "@id": "https://www.variotdbs.pl/ref/cvss/", }, description: { "@id": "https://www.variotdbs.pl/ref/description/", }, exploit_availability: { "@id": "https://www.variotdbs.pl/ref/exploit_availability/", }, external_ids: { "@id": "https://www.variotdbs.pl/ref/external_ids/", }, iot: { "@id": "https://www.variotdbs.pl/ref/iot/", }, iot_taxonomy: { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/", }, patch: { "@id": "https://www.variotdbs.pl/ref/patch/", }, problemtype_data: { "@id": "https://www.variotdbs.pl/ref/problemtype_data/", }, references: { "@id": "https://www.variotdbs.pl/ref/references/", }, sources: { "@id": "https://www.variotdbs.pl/ref/sources/", }, sources_release_date: { "@id": "https://www.variotdbs.pl/ref/sources_release_date/", }, sources_update_date: { "@id": "https://www.variotdbs.pl/ref/sources_update_date/", }, threat_type: { "@id": "https://www.variotdbs.pl/ref/threat_type/", }, title: { "@id": "https://www.variotdbs.pl/ref/title/", }, type: { "@id": "https://www.variotdbs.pl/ref/type/", }, }, "@id": "https://www.variotdbs.pl/vuln/VAR-202103-0198", affected_products: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { model: "simatic mv440 ur", scope: "lt", trust: 1, vendor: "siemens", version: "7.0.6", }, { model: "simatic mv440 sr", scope: "lt", trust: 1, vendor: "siemens", version: "7.0.6", }, { model: "simatic mv420 sr-p", scope: "lt", trust: 1, vendor: "siemens", version: "7.0.6", }, { model: "simatic mv440 hr", scope: "lt", trust: 1, vendor: "siemens", version: "7.0.6", }, { model: "simatic mv420 sr-b body", scope: "lt", trust: 1, vendor: "siemens", version: "7.0.6", }, { model: "simatic mv420 sr-b", scope: "lt", trust: 1, vendor: "siemens", version: "7.0.6", }, { model: "simatic mv420 sr-p body", scope: "lt", trust: 1, vendor: "siemens", version: "7.0.6", }, { model: "simatic mv420 sr-b body", scope: null, trust: 0.8, vendor: "シーメンス", version: null, }, { model: "simatic mv440 ur", scope: null, trust: 0.8, vendor: "シーメンス", version: null, }, { model: "simatic mv440 sr", scope: null, trust: 0.8, vendor: "シーメンス", version: null, }, { model: "simatic mv440 hr", scope: null, trust: 0.8, vendor: "シーメンス", version: null, }, { model: "simatic mv420 sr-p body", scope: null, trust: 0.8, vendor: "シーメンス", version: null, }, { model: "simatic mv420 sr-p", scope: null, trust: 0.8, vendor: "シーメンス", version: null, }, { model: "simatic mv420 sr-b", scope: null, trust: 0.8, vendor: "シーメンス", version: null, }, { model: "simatic mv400 family", scope: "lt", trust: 0.6, vendor: "siemens", version: "7.0.6", }, ], sources: [ { db: "CNVD", id: "CNVD-2021-16443", }, { db: "JVNDB", id: "JVNDB-2020-016315", }, { db: "NVD", id: "CVE-2020-25241", }, ], }, configurations: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", children: { "@container": "@list", }, cpe_match: { "@container": "@list", }, data: { "@container": "@list", }, nodes: { "@container": "@list", }, }, data: [ { CVE_data_version: "4.0", nodes: [ { children: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:siemens:simatic_mv440_sr_firmware:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "7.0.6", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:h:siemens:simatic_mv440_sr:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, ], operator: "OR", }, ], cpe_match: [], operator: "AND", }, { children: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:siemens:simatic_mv440_hr_firmware:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "7.0.6", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:h:siemens:simatic_mv440_hr:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, ], operator: "OR", }, ], cpe_match: [], operator: "AND", }, { children: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:siemens:simatic_mv440_ur_firmware:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "7.0.6", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:h:siemens:simatic_mv440_ur:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, ], operator: "OR", }, ], cpe_match: [], operator: "AND", }, { children: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:siemens:simatic_mv420_sr-b_firmware:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "7.0.6", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:h:siemens:simatic_mv420_sr-b:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, ], operator: "OR", }, ], cpe_match: [], operator: "AND", }, { children: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:siemens:simatic_mv420_sr-p_firmware:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "7.0.6", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:h:siemens:simatic_mv420_sr-p:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, ], operator: "OR", }, ], cpe_match: [], operator: "AND", }, { children: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:siemens:simatic_mv420_sr-b_body_firmware:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "7.0.6", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:h:siemens:simatic_mv420_sr-b_body:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, ], operator: "OR", }, ], cpe_match: [], operator: "AND", }, { children: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:siemens:simatic_mv420_sr-p_body_firmware:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "7.0.6", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:h:siemens:simatic_mv420_sr-p_body:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, ], operator: "OR", }, ], cpe_match: [], operator: "AND", }, ], }, ], sources: [ { db: "NVD", id: "CVE-2020-25241", }, ], }, cve: "CVE-2020-25241", cvss: { "@context": { cvssV2: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", }, cvssV3: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", }, severity: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#", }, "@id": "https://www.variotdbs.pl/ref/cvss/severity", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { cvssV2: [ { acInsufInfo: false, accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", author: "NVD", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", exploitabilityScore: 10, impactScore: 2.9, integrityImpact: "NONE", obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "MEDIUM", trust: 1, userInteractionRequired: false, vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, { acInsufInfo: null, accessComplexity: "Low", accessVector: "Network", authentication: "None", author: "NVD", availabilityImpact: "Partial", baseScore: 5, confidentialityImpact: "None", exploitabilityScore: null, id: "CVE-2020-25241", impactScore: null, integrityImpact: "None", obtainAllPrivilege: null, obtainOtherPrivilege: null, obtainUserPrivilege: null, severity: "Medium", trust: 0.8, userInteractionRequired: null, vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", author: "CNVD", availabilityImpact: "COMPLETE", baseScore: 7.8, confidentialityImpact: "NONE", exploitabilityScore: 10, id: "CNVD-2021-16443", impactScore: 6.9, integrityImpact: "NONE", severity: "HIGH", trust: 0.6, vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:C", version: "2.0", }, ], cvssV3: [ { attackComplexity: "LOW", attackVector: "NETWORK", author: "NVD", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", exploitabilityScore: 3.9, impactScore: 3.6, integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", trust: 1, userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, { attackComplexity: "Low", attackVector: "Network", author: "NVD", availabilityImpact: "High", baseScore: 7.5, baseSeverity: "High", confidentialityImpact: "None", exploitabilityScore: null, id: "CVE-2020-25241", impactScore: null, integrityImpact: "None", privilegesRequired: "None", scope: "Unchanged", trust: 0.8, userInteraction: "None", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, ], severity: [ { author: "NVD", id: "CVE-2020-25241", trust: 1.8, value: "HIGH", }, { author: "CNVD", id: "CNVD-2021-16443", trust: 0.6, value: "HIGH", }, { author: "CNNVD", id: "CNNVD-202103-685", trust: 0.6, value: "HIGH", }, ], }, ], sources: [ { db: "CNVD", id: "CNVD-2021-16443", }, { db: "JVNDB", id: "JVNDB-2020-016315", }, { db: "NVD", id: "CVE-2020-25241", }, { db: "CNNVD", id: "CNNVD-202103-685", }, ], }, description: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does not correctly validate the sequence number for incoming TCP RST packages. An attacker could exploit this to terminate arbitrary TCP sessions. SIMATIC MV400 The family contains a vulnerability in array index validation.Denial of service (DoS) It may be put into a state. Siemens SIMATIC MV400 is an industrial equipment of Germany's Siemens (Siemens) company. Used for optical identification. \n\r\n\r\nAn unspecified vulnerability exists in the Siemens SIMATIC MV400 series TCP protocol stack", sources: [ { db: "NVD", id: "CVE-2020-25241", }, { db: "JVNDB", id: "JVNDB-2020-016315", }, { db: "CNVD", id: "CNVD-2021-16443", }, ], trust: 2.16, }, external_ids: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { db: "NVD", id: "CVE-2020-25241", trust: 3, }, { db: "SIEMENS", id: "SSA-599268", trust: 2.2, }, { db: "JVN", id: "JVNVU93441670", trust: 0.8, }, { db: "JVNDB", id: "JVNDB-2020-016315", trust: 0.8, }, { db: "CNVD", id: "CNVD-2021-16443", trust: 0.6, }, { db: "AUSCERT", id: "ESB-2021.0852", trust: 0.6, }, { db: "ICS CERT", id: "ICSA-21-068-07", trust: 0.6, }, { db: "CNNVD", id: "CNNVD-202103-685", trust: 0.6, }, ], sources: [ { db: "CNVD", id: "CNVD-2021-16443", }, { db: "JVNDB", id: "JVNDB-2020-016315", }, { db: "NVD", id: "CVE-2020-25241", }, { db: "CNNVD", id: "CNNVD-202103-685", }, ], }, id: "VAR-202103-0198", iot: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: true, sources: [ { db: "CNVD", id: "CNVD-2021-16443", }, ], trust: 1.6, }, iot_taxonomy: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { category: [ "ICS", ], sub_category: null, trust: 0.6, }, ], sources: [ { db: "CNVD", id: "CNVD-2021-16443", }, ], }, last_update_date: "2023-12-18T11:42:55.712000Z", patch: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { title: "SSA-599268", trust: 0.8, url: "https://cert-portal.siemens.com/productcert/pdf/ssa-599268.pdf", }, { title: "Siemens SIMATIC MV400 Security vulnerabilities", trust: 0.6, url: "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=144277", }, ], sources: [ { db: "JVNDB", id: "JVNDB-2020-016315", }, { db: "CNNVD", id: "CNNVD-202103-685", }, ], }, problemtype_data: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { problemtype: "CWE-129", trust: 1, }, { problemtype: "Improper validation of array indexes (CWE-129) [NVD Evaluation ]", trust: 0.8, }, ], sources: [ { db: "JVNDB", id: "JVNDB-2020-016315", }, { db: "NVD", id: "CVE-2020-25241", }, ], }, references: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { trust: 2.2, url: "https://cert-portal.siemens.com/productcert/pdf/ssa-599268.pdf", }, { trust: 1.4, url: "https://nvd.nist.gov/vuln/detail/cve-2020-25241", }, { trust: 0.8, url: "https://jvn.jp/vu/jvnvu93441670/", }, { trust: 0.6, url: "https://vigilance.fr/vulnerability/siemens-simatic-mv400-two-vulnerabilities-via-tcp-stack-34783", }, { trust: 0.6, url: "https://www.auscert.org.au/bulletins/esb-2021.0852", }, { trust: 0.6, url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-068-07", }, ], sources: [ { db: "CNVD", id: "CNVD-2021-16443", }, { db: "JVNDB", id: "JVNDB-2020-016315", }, { db: "NVD", id: "CVE-2020-25241", }, { db: "CNNVD", id: "CNNVD-202103-685", }, ], }, sources: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", data: { "@container": "@list", }, }, data: [ { db: "CNVD", id: "CNVD-2021-16443", }, { db: "JVNDB", id: "JVNDB-2020-016315", }, { db: "NVD", id: "CVE-2020-25241", }, { db: "CNNVD", id: "CNNVD-202103-685", }, ], }, sources_release_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", data: { "@container": "@list", }, }, data: [ { date: "2021-03-11T00:00:00", db: "CNVD", id: "CNVD-2021-16443", }, { date: "2021-11-22T00:00:00", db: "JVNDB", id: "JVNDB-2020-016315", }, { date: "2021-03-15T17:15:20.097000", db: "NVD", id: "CVE-2020-25241", }, { date: "2021-03-09T00:00:00", db: "CNNVD", id: "CNNVD-202103-685", }, ], }, sources_update_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", data: { "@container": "@list", }, }, data: [ { date: "2021-03-23T00:00:00", db: "CNVD", id: "CNVD-2021-16443", }, { date: "2021-11-22T09:06:00", db: "JVNDB", id: "JVNDB-2020-016315", }, { date: "2021-03-18T20:04:09.937000", db: "NVD", id: "CVE-2020-25241", }, { date: "2021-03-19T00:00:00", db: "CNNVD", id: "CNNVD-202103-685", }, ], }, threat_type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "remote", sources: [ { db: "CNNVD", id: "CNNVD-202103-685", }, ], trust: 0.6, }, title: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "SIMATIC MV400 Array index validation vulnerability in family", sources: [ { db: "JVNDB", id: "JVNDB-2020-016315", }, ], trust: 0.8, }, type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "other", sources: [ { db: "CNNVD", id: "CNNVD-202103-685", }, ], trust: 0.6, }, }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.