CVE-2021-37186

Name of the Vulnerable Software and Affected Versions LOGO! CMR2020 versions prior to V2.2 LOGO! CMR2040 versions prior to V2.2 SIMATIC RTU3010C versions prior to V4.0.9 SIMATIC RTU3030C versions prior to V4.0.9 SIMATIC RTU3031C versions prior to V4.0.9 SIMATIC RTU3041C versions prior to V4.0.9

Description A vulnerability has been identified in the TCP/IP stack of the affected devices, where it does not properly calculate the random numbers used as Initial Sequence Numbers (ISN). This could allow an adjacent attacker with network access to the LAN interface to interfere with traffic, spoof the connection, and gain access to sensitive information.

Recommendations For LOGO! CMR2020 versions prior to V2.2, update to version V2.2 or later. For LOGO! CMR2040 versions prior to V2.2, update to version V2.2 or later. For SIMATIC RTU3010C versions prior to V4.0.9, update to version V4.0.9 or later. For SIMATIC RTU3030C versions prior to V4.0.9, update to version V4.0.9 or later. For SIMATIC RTU3031C versions prior to V4.0.9, update to version V4.0.9 or later. For SIMATIC RTU3041C versions prior to V4.0.9, update to version V4.0.9 or later.