CVE-2020-28397

Published: Aug 10, 2021Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7 PLCSIM Advanced (All versions > V2 < V4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (Version V4.4), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions > V2.5 < V2.9.2), SIMATIC S7-1500 Software Controller (All versions > V2.5 < V21.9), TIM 1531 IRC (incl. SIPLUS NET variants) (Version V2.1). Due to an incorrect authorization check in the affected component, an attacker could extract information about access protected PLC program variables over port 102/tcp from an affected device when reading multiple attributes at once.

Affected (56)

Siemens

56 products

Cpu 1504d Tf Firmware

Cpu 1507d Tf Firmware

Cpu 1515sp Pc2 Tf Firmware

Simatic S7 Plcsim Advanced Firmware

Simatic S7 1500 Software Controller

Tim 1531 Irc Firmware

Siplus Cpu 1510sp F 1pn Firmware

Siplus Cpu 1511 1 Pn Firmware

Siplus Cpu 1511f 1 Pn Firmware

Siplus Cpu 1512sp 1 Pn Firmware

Siplus Cpu 1512sp F 1pn Firmware

Siplus Cpu 1513 1 Pn Firmware

Siplus Cpu 1513f 1 Pn Firmware

Siplus Cpu 1516 3 Pn/dp Firmware

Siplus Cpu 1516f 3 Pn/dp Firmware

Siplus Cpu 1518 4 Pn/dp Firmware

Siplus Cpu 1518f 4 Pn/dp Firmware

Cpu 1510sp 1pn Firmware

Cpu1510sp F 1 Firmware

Cpu 1511 1pn Firmware

Cpu 1511c 1 Pn Firmware

Cpu 1511f 1pn Firmware

Cpu 1511t 1pn Firmware

Cpu 1511tf 1pn Firmware

Cpu 1512c 1 Pn Firmware

Cpu 1512sp 1 Pn Firmware

Cpu 1512sp F 1 Pn Firmware

Cpu 1513 1 Pn Firmware

Cpu 1513f 1 Pn Firmware

Cpu 1513r 1 Pn Firmware

Cpu 1513pro F 2 Pn Firmware

Cpu 1515 2 Firmware

Cpu 1515f 2 Firmware

Cpu 1515r 2 Pn Firmware

Cpu 1515t 2 Pn Firmware

Cpu 1515tf 2 Pn Firmware

Cpu 1516pro F 2 Pn Firmware

Cpu 1516pro 2 Pn Firmware

Cpu 1516 3 Firmware

Cpu 1516f 3 Firmware

Cpu 1516t 3 Pn/dp Firmware

Cpu 1516tf 3 Pn/dp Firmware

Cpu 1517 3 Pn/dp Firmware

Cpu 1517f 3 Pn/dp Firmware

Cpu 1517t 3 Pn/dp Firmware

Cpu 1517tf 3 Pn/dp Firmware

Cpu 1518 4 Pn/dp Firmware

Cpu 1518f 4 Pn/dp Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1504d Tf Firmware	Before 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1504d Tf	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1507d Tf Firmware	Before 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1507d Tf	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1515sp Pc2 Tf Firmware	Before 21.9

Running on/with	Platform Versions
Siemens Cpu 1515sp Pc2 Tf	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 Plcsim Advanced Firmware	From 2.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic S7 Plcsim Advanced	All versions

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Software Controller	From 2.5 to 21.9

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Tim 1531 Irc Firmware	Version 2.1

Running on/with	Platform Versions
Siemens Tim 1531 Irc	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1211c Firmware	Version 4.4

Running on/with	Platform Versions
Siemens Cpu 1211c	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1212c Firmware	Version 4.4

Running on/with	Platform Versions
Siemens Cpu 1212c	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1212fc Firmware	Version 4.4

Running on/with	Platform Versions
Siemens Cpu 1212fc	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1214fc Firmware	Version 4.4

Running on/with	Platform Versions
Siemens Cpu 1214fc	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1214c Firmware	Version 4.4

Running on/with	Platform Versions
Siemens Cpu 1214c	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1215fc Firmware	Version 4.4

Running on/with	Platform Versions
Siemens Cpu 1215fc	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1215c Firmware	Version 4.4

Running on/with	Platform Versions
Siemens Cpu 1215c	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1217c Firmware	Version 4.4

Running on/with	Platform Versions
Siemens Cpu 1217c	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus Cpu 1510sp F 1pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Siplus Cpu 1510sp F 1pn	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus Cpu 1511 1 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Siplus Cpu 1511 1 Pn	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus Cpu 1511f 1 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Siplus Cpu 1511f 1 Pn	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus Cpu 1512sp 1 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Siplus Cpu 1512sp 1 Pn	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus Cpu 1512sp F 1pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Siplus Cpu 1512sp F 1pn	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus Cpu 1513 1 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Siplus Cpu 1513 1 Pn	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus Cpu 1513f 1 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Siplus Cpu 1513f 1 Pn	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus Cpu 1516 3 Pn/dp Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Siplus Cpu 1516 3 Pn/dp	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus Cpu 1516f 3 Pn/dp Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Siplus Cpu 1516f 3 Pn/dp	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus Cpu 1518 4 Pn/dp Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Siplus Cpu 1518 4 Pn/dp	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus Cpu 1518f 4 Pn/dp Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Siplus Cpu 1518f 4 Pn/dp	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1510sp 1pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1510sp 1pn	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu1510sp F 1 Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu1510sp F 1	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1511 1pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1511 1pn	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1511c 1 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1511c 1 Pn	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1511f 1pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1511f 1pn	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1511t 1pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1511t 1pn	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1511tf 1pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1511tf 1pn	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1512c 1 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1512c 1 Pn	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1512sp 1 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1512sp 1 Pn	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1512sp F 1 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1512sp F 1 Pn	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1513 1 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1513 1 Pn	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1513f 1 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1513f 1 Pn	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1513r 1 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1513r 1 Pn	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1513pro F 2 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1513pro F 2 Pn	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1515 2 Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1515 2	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1515f 2 Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1515f 2	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1515r 2 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1515r 2 Pn	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1515t 2 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1515t 2 Pn	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1515tf 2 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1515tf 2 Pn	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1516pro F 2 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1516pro F 2 Pn	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1516pro 2 Pn Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1516pro 2 Pn	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1516 3 Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1516 3	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1516f 3 Firmware	From 2.5 to 2.9.2.

Running on/with	Platform Versions
Siemens Cpu 1516f 3	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1516t 3 Pn/dp Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1516t 3 Pn/dp	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1516tf 3 Pn/dp Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1516tf 3 Pn/dp	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1517 3 Pn/dp Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1517 3 Pn/dp	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1517f 3 Pn/dp Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1517f 3 Pn/dp	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1517t 3 Pn/dp Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1517t 3 Pn/dp	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1517tf 3 Pn/dp Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1517tf 3 Pn/dp	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1518 4 Pn/dp Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1518 4 Pn/dp	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Cpu 1518f 4 Pn/dp Firmware	From 2.5 to 2.9.2

Running on/with	Platform Versions
Siemens Cpu 1518f 4 Pn/dp	All versions

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (2)

https://cert-portal.siemens.com/productcert/pdf/ssa-865327.pdf

Source: productcert@siemens.com

PatchVendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-865327.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.