Skip to content
OpenAdvisories
High SSA-113131 2 CVEs

SSA-113131: Denial of Service Vulnerabilities in SIMATIC S7-400 CPUs

Published Nov 13, 2018 · Updated May 9, 2023 · Revision 6

Vendor: Siemens Product: SIMATIC S7-400 CPU 412-1 DP V7 (6ES7412-1XJ07-0AB0) Product: SIMATIC S7-400 CPU 412-2 DP V7 (6ES7412-2XK07-0AB0) Product: SIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0) Product: SIMATIC S7-400 CPU 414-2 DP V7 (6ES7414-2XL07-0AB0) Product: SIMATIC S7-400 CPU 414-3 DP V7 (6ES7414-3XM07-0AB0) Product: SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0) Product: SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0) Product: SIMATIC S7-400 CPU 416-2 DP V7 (6ES7416-2XP07-0AB0) Product: SIMATIC S7-400 CPU 416-3 DP V7 (6ES7416-3XS07-0AB0) Product: SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0) Product: SIMATIC S7-400 CPU 416F-2 DP V7 (6ES7416-2FP07-0AB0) Product: SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0) Product: SIMATIC S7-400 CPU 417-4 DP V7 (6ES7417-4XT07-0AB0) Product: SIMATIC S7-400 H V4.5 and below CPU family (incl. SIPLUS variants) Product: SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) Product: SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) Product: SIMATIC S7-410 CPU family (incl. SIPLUS variants) Product: SIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0) Product: SIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0) Product: SIPLUS S7-400 CPU 416-3 V7 (6AG1416-3XS07-7AB0) Product: SIPLUS S7-400 CPU 417-4 V7 (6AG1417-4XT07-7AB0)

Summary

Two vulnerabilities have been identified in the SIMATIC S7-400 CPU family
that could allow an attacker to cause a denial of service condition. In order
to exploit the vulnerabilities, an attacker must have access to the affected
devices on port 102/tcp via Ethernet, PROFIBUS or Multi Point Interfaces
(MPI).

Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 2

Revision history

  1. #6

    Expanded SIMATIC S7-400 V7 CPU family (incl. SIPLUS variants) to individual products and MLFBs; added fix for SIMATIC S7-400 PN/DP V7 CPUs; clarified that no fix is planned for other S7-400 V7 CPUs

  2. #5

    No fix planned for SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)

  3. #4

    No fix planned for SIMATIC S7-400 PN/DP V6 and below CPU family, and for SIMATIC S7-400 H V4.5 and below CPU family

  4. #3

    SIPLUS devices now explicitly mentioned in the list of affected products

  5. #2

    Updated acknowledgements and added solution for S7-400H V6

  6. #1

    Publication Date

References