High ICSA-22-349-03 4 CVEs

Siemens Multiple Denial of Service Vulnerabilities in Industrial Products

Published Dec 13, 2022 · Updated May 6, 2025 · Revision 7

Vendor: Siemens Product: SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0) Product: SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0) Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) Product: SIMATIC S7-1200 CPU family (incl. SIPLUS variants) Product: SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0) Product: SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0) Product: SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0) Product: SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Product: SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0) Product: SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0) Product: SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0) Product: SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0) Product: SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0) Product: SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Product: SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0) Product: SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DK01-0AB0) Product: SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL01-0AB0) Product: SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL02-0AB0) Product: SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL01-0AB0) Product: SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL02-0AB0) Product: SIMATIC S7-1500 CPU 1513R-1 PN (6ES7513-1RL00-0AB0) Product: SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM01-0AB0) Product: SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM02-0AB0) Product: SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM01-0AB0) Product: SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM02-0AB0) Product: SIMATIC S7-1500 CPU 1515R-2 PN (6ES7515-2RM00-0AB0) Product: SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TM01-0AB0) +80 more

Summary

Affected SIMATIC firmware contains multiple vulnerabilities that could allow an unauthenticated attacker to perform a denial of service attack under certain conditions.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 4

High 7.5

CVE-2021-40365

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…

Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP SIMATIC S7-1500 CPU 1513-1 PN SIMATIC Drive Controller CPU 1507D TF ICS / OT

Dec 13, 2022
Medium 5.5

CVE-2021-44694

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…

Siemens SIMATIC S7-1500 CPU 1512C-1 PN SIMATIC Drive Controller CPU 1504D TF SIMATIC S7-1500 CPU 1513F-1 PN ICS / OT

Dec 13, 2022
Medium 4.9

CVE-2021-44693

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…

Siemens SIMATIC S7-1500 CPU 1511C-1 PN SIMATIC S7-1500 CPU 1515T-2 PN SIMATIC S7-1500 CPU 1511T-1 PN ICS / OT

Dec 13, 2022
Medium 4.9

CVE-2021-44695

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…

Siemens SIMATIC S7-1500 CPU 1515F-2 PN SIMATIC S7-1500 CPU 1511F-1 PN SIMATIC S7-1500 CPU 1515TF-2 PN ICS / OT

Dec 13, 2022

Revision history

2025-05-06 #7
Revision - Fixing typos
2023-09-12 #6
Clarified SIMATIC S7-1500 Software Controller versions and adjusted fix for SIMATIC S7-1500 Software Controller V2; Added fix for SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
2023-07-11 #5
Added fix for SIMATIC S7-1500 CPU V2 firmware versions; Fix for SIMATIC Drive Controller available already with V2.9.7
2023-05-09 #4
Added fix for SIMATIC S7-1500 Software Controller
2023-04-11 #3
Added fix for TIM 1531 family
2023-01-10 #2
Clarified SIMATIC S7-1500 CPU versions
2022-12-13 #1
Publication Date

References

SSA-382653: Multiple Denial of Service Vulnerabilities in Industrial Products - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-382653.html
SSA-382653: Multiple Denial of Service Vulnerabilities in Industrial Products - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf
SSA-382653: Multiple Denial of Service Vulnerabilities in Industrial Products - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-382653.txt
ICS Advisory ICSA-22-349-03 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-349-03
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B