Medium severity · published Sep 14, 2021
CVE-2021-37186
A vulnerability has been identified in LOGO! CMR2020 (All versions < V2.2), LOGO! CMR2040 (All versions < V2.2), SIMATIC RTU3010C (All versions < V4.0.9), SIMATIC RTU3030C (All…
5.4
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability has been identified in LOGO! CMR2020 (All versions < V2.2), LOGO! CMR2040 (All versions < V2.2), SIMATIC RTU3010C (All versions < V4.0.9), SIMATIC RTU3030C (All versions < V4.0.9), SIMATIC RTU3031C (All versions < V4.0.9), SIMATIC RTU3041C (All versions < V4.0.9). The underlying TCP/IP stack does not properly calculate the random numbers used as ISN (Initial Sequence Numbers). An adjacent attacker with network access to the LAN interface could interfere with traffic, spoof the connection and gain access to sensitive information.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LC
Logo! Cmr2020 Firmware · Siemens
before 2.2 · source: NVD
LC
Logo! Cmr2040 Firmware · Siemens
before 2.2 · source: NVD
SR
Simatic Rtu3010c Firmware · Siemens
before 4.0.9 · source: NVD
SR
Simatic Rtu3030c Firmware · Siemens
before 4.0.9 · source: NVD
SR
Simatic Rtu3031c Firmware · Siemens
before 4.0.9 · source: NVD
SR
Simatic Rtu3041c Firmware · Siemens
before 4.0.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-37186
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-37186
Patch
https://cert-portal.siemens.com/productcert/pdf/ssa-316383.pdf
More from Logo! Cmr2020 Firmware
7.5
CVE-2020-36478
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS)
7.5
CVE-2020-36475
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS)
3.7
CVE-2021-22924
libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching…