CVE-2020-28397
Reported by siemens · Published August 10, 2021
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7 PLCSIM Advanced (All versions > V2 < V4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (Version V4.4), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions > V2.5 < V2.9.2), SIMATIC S7-1500 Software Controller (All versions > V2.5 < V21.9), TIM 1531 IRC (incl. SIPLUS NET variants) (Version V2.1). Due to an incorrect authorization check in the affected component, an attacker could extract information about access protected PLC program variables over port 102/tcp from an affected device when reading multiple attributes at once.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| cpu_1516-3_firmware | siemens | 2.9.2 |
| siplus_cpu-1516f-3_pn\/dp_firmware | siemens | 2.9.2 |
| cpu_1516tf-3_pn\/dp_firmware | siemens | 2.9.2 |
| cpu_1515tf-2_pn_firmware | siemens | 2.9.2 |
| cpu_1516pro-2_pn_firmware | siemens | 2.9.2 |
| cpu_1511tf-1pn_firmware | siemens | 2.9.2 |
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | SIMATIC Drive Controller family | All versions < V2.9.2 |
| Siemens | SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) | All versions < V21.9 |
| Siemens | SIMATIC S7 PLCSIM Advanced | All versions > V2 < V4 |
| Siemens | SIMATIC S7-1200 CPU family (incl. SIPLUS variants) | Version V4.4 |
| Siemens | SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) | All versions > V2.5 < V2.9.2 |
| Siemens | SIMATIC S7-1500 Software Controller | All versions > V2.5 < V21.9 |
| Siemens | TIM 1531 IRC (incl. SIPLUS NET variants) | Version V2.1 |
| Siemens | SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) | * |
| Siemens | SIMATIC S7 PLCSIM Advanced | * |
| Siemens | SIMATIC Drive Controller family | * |
| Siemens | SIMATIC S7-1500 Software Controller | * |
| Siemens | SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) | * |
| Siemens | SIMATIC S7-1200 CPU family (incl. SIPLUS variants) | 4.4 |
| Siemens | TIM 1531 IRC (incl. SIPLUS NET variants) | 2.1 |
Timeline
- Apr 13, 2021 CVE Published
- Aug 11, 2021 EPSS Score (30 in total, the first dated here)
- Apr 4, 2026 Security Advisory
- Sep 1, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2020-28397
vulnetix vdb fixes CVE-2020-28397Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2020-28397/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart