simatic_mv440_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/simatic_mv440_firmware/ Sun, 26 Feb 2023 06:40:23 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png simatic_mv440_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/simatic_mv440_firmware/ 32 32 CVE-2020-27632 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-27632/ Sun, 26 Feb 2023 06:40:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-27632/ In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions.

The post CVE-2020-27632 appeared first on CVE Vulnerability.

]]> In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions.

The post CVE-2020-27632 appeared first on CVE Vulnerability.

]]> CVE-2019-10925 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10925/ Sun, 26 Feb 2023 06:29:21 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10925/ A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). An authenticated attacker could escalate privileges by sending specially crafted requests to the integrated webserver. The security vulnerability can be exploited by an attacker with network access to the device. Valid user credentials, but no user interaction are required. Successful exploitation compromises […]

The post CVE-2019-10925 appeared first on CVE Vulnerability.

]]> A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). An authenticated attacker could escalate privileges by sending specially crafted requests to the integrated webserver. The security vulnerability can be exploited by an attacker with network access to the device. Valid user credentials, but no user interaction are required. Successful exploitation compromises integrity and availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.

The post CVE-2019-10925 appeared first on CVE Vulnerability.

]]> CVE-2019-10926 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10926/ Sun, 26 Feb 2023 06:29:21 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10926/ A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). Communication with the device is not encrypted. Data transmitted between the device and the user can be obtained by an attacker in a privileged network position. The security vulnerability can be exploited by an attacker in a privileged network position which allows […]

The post CVE-2019-10926 appeared first on CVE Vulnerability.

]]> A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). Communication with the device is not encrypted. Data transmitted between the device and the user can be obtained by an attacker in a privileged network position. The security vulnerability can be exploited by an attacker in a privileged network position which allows eavesdropping the communication between the affected device and the user. The user must invoke a session. Successful exploitation of the vulnerability compromises confidentiality of the data transmitted.

The post CVE-2019-10926 appeared first on CVE Vulnerability.

]]>