Skip to content
OpenAdvisories
High SSA-102233 1 CVE

SSA-102233: SegmentSmack in VxWorks-based Industrial Devices

Published Apr 14, 2020 · Updated Apr 11, 2023 · Revision 12

Vendor: Siemens Product: SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3) Product: SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3) Product: SCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6) Product: SCALANCE X202-2IRT (6GK5202-2BB00-2BA3) Product: SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3) Product: SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6) Product: SCALANCE X204-2 (6GK5204-2BB10-2AA3) Product: SCALANCE X204-2FM (6GK5204-2BB11-2AA3) Product: SCALANCE X204-2LD (6GK5204-2BC10-2AA3) Product: SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2) Product: SCALANCE X204-2TS (6GK5204-2BB10-2CA2) Product: SCALANCE X204IRT (6GK5204-0BA00-2BA3) Product: SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6) Product: SCALANCE X206-1 (6GK5206-1BB10-2AA3) Product: SCALANCE X206-1LD (6GK5206-1BC10-2AA3) Product: SCALANCE X208 (6GK5208-0BA10-2AA3) Product: SCALANCE X208PRO (6GK5208-0HA10-2AA6) Product: SCALANCE X212-2 (6GK5212-2BB00-2AA3) Product: SCALANCE X212-2LD (6GK5212-2BC00-2AA3) Product: SCALANCE X216 (6GK5216-0BA00-2AA3) Product: SCALANCE X224 (6GK5224-0BA00-2AA3) Product: SCALANCE X302-7 EEC (230V coated) (6GK5302-7GD00-3GA3) Product: SCALANCE X302-7 EEC (230V) (6GK5302- 7GD00-3EA3) Product: SCALANCE X302-7 EEC (24V coated) (6GK5302-7GD00-1GA3) Product: SCALANCE X302-7 EEC (24V) (6GK5302-7GD00-1EA3) Product: SCALANCE X302-7 EEC (2x 230V coated) (6GK5302-7GD00-4GA3) Product: SCALANCE X302-7 EEC (2x 230V) (6GK5302-7GD00-4EA3) Product: SCALANCE X302-7 EEC (2x 24V coated) (6GK5302-7GD00-2GA3) Product: SCALANCE X302-7 EEC (2x 24V) (6GK5302-7GD00-2EA3) +84 more

Summary

The products listed below contain a vulnerability that could allow remote attackers to affect
the availability of the devices under certain conditions.
The underlying TCP stack can be forced to make very computation expensive calls
for every incoming packet which can lead to a Denial-of-Service.

Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #12

    Added fix for SIMATIC CP 443-1 and CP 443-1 Advanced

  2. #11

    No fix planned for SIMATIC NET CP 443-1 Advanced

  3. #10

    Added solution for SIMATIC CP 442-1 RNA and SIMATIC CP 443-1 RNA; added affected product SIMATIC CP 343-1 Advanced

  4. #9

    Added solution for SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)

  5. #8

    Added affected products SIMATIC CP 442-1 RNA and SIMATIC CP 443-1 RNA

  6. #7

    Added solution for SCALANCE X-200 switch family

  7. #6

    Added update information for SCALANCE X-200IRT switch family

  8. #5

    Errata: Removed SCALANCE S-600 family as they are not affected by CVE-2019-19301

  9. #4

    Updated information regarding successor products for SIMATIC RF180C and RF182C

  10. #3

    Informed about successor products for SIMATIC RF180C and RF182C

  11. #2

    Added SCALANCE S-600 family and informed about successor products for it

  12. #1

    Publication Date

References