Siemens SIMATIC S7-300 and S7-400 CPUs (Update C)
The authentication protocol between a client and a PLC via Port 102/TCP (ISO-TSAP) insufficiently protects the transmitted password. This could allow an attacker that is able to intercept the network traffic to obtain valid PLC credentials.CVE-2020-15791 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been calculated; the CVSS vector string is(AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).