Skip to content
OpenAdvisories
Medium ICSA-20-343-05 1 CVE

Siemens Embedded TCP/IP Stack Vulnerabilities-AMNESIA:33 (Update C)

Published Dec 8, 2020 · Updated May 6, 2025 · Revision 5

Vendor: Siemens Product: SENTRON 3VA COM100/800 Product: SENTRON 3VA DSP800 Product: SENTRON PAC2200 (without MID Approval) Product: SENTRON PAC3200 Product: SENTRON PAC3200T Product: SENTRON PAC4200 Product: SIRIUS 3RW5 communication module Modbus TCP

Summary

Security researchers discovered and disclosed 33 vulnerabilities in several open-source TCP/IP stacks for embedded devices, also known as "AMNESIA:33" vulnerabilities.

This advisory describes the impact of one of these vulnerabilities (CVE-2020-13988) to Siemens products. Siemens has released updates for the affected products and recommends to update to the latest versions.

The impact of additional "AMNESIA:33" vulnerabilities is described in Siemens Security Advisory SSA-541018.

Vulnerabilities 1

Revision history

  1. #5

    Revision - Fixing typos

  2. #4

    Added download link for SENTRON PAC3200T

  3. #3

    Added solution for SIRIUS 3RW5 communication module Modbus TCP; added reference to additional AMNESIA:33 advisory (SSA-541018)

  4. #2

    Added additional affected products (SENTRON PAC2200, PAC3200T, 3VA COM100/800, 3VA DSP800) and related fix release information

  5. #1

    Publication Date

References