Skip to content
OpenAdvisories
High SSA-321292 1 CVE

SSA-321292: Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial Products

Published May 10, 2022 · Updated Oct 8, 2024 · Revision 7

Vendor: Siemens Product: OpenPCS 7 V9.1 Product: SIMATIC NET PC Software V14 Product: SIMATIC NET PC Software V15 Product: SIMATIC NET PC Software V16 Product: SIMATIC NET PC Software V17 Product: SIMATIC Process Historian OPC UA Server Product: SIMATIC WinCC Product: SIMATIC WinCC Runtime Professional Product: SIMATIC WinCC Unified PC Runtime V18 Product: TeleControl Server Basic V3

Summary

A vulnerability has been identified in the OPC Foundation Local Discovery Server (LDS) [0] of several industrial products. The vulnerability could cause a denial of service condition on the service or the device.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

[0]
https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2021-40142.pdf

Vulnerabilities 1

  • High 7.5
    CVE-2021-40142

    In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS…

Revision history

  1. #7

    Added OpenPCS 7 affected version and clarified no fix planned for OpenPCS 7 V9.1

  2. #6

    Added fix for SIMATIC WinCC

  3. #5

    Added OpenPCS 7 to the list of affected products

  4. #4

    Added fix for SIMATIC WinCC Runtime Professional and SIMATIC WinCC Unified PC Runtime

  5. #3

    Added fix for TeleControl Server Basic

  6. #2

    Added fix for SIMATIC NET PC Software V16

  7. #1

    Publication Date

References