SSA-280603: Denial of Service Vulnerability in SINUMERIK ONE and SINUMERIK MC

A vulnerability has been identified in the integrated S7-1500 CPU of SINUMERIK ONE and SINUMERIK MC products that could allow an attacker to cause a denial of service condition. In order to exploit the vulnerability, an attacker must have access to the affected devices on port 102/tcp.

Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available.

Note: The affected integrated S7-1500 CPUs and related products are advised in [1].

[1]
https://cert-portal.siemens.com/productcert/html/ssa-592380.html