Skip to content
OpenAdvisories
High SSA-346262 1 CVE

SSA-346262: Denial of Service Vulnerability in SNMP Interface of Industrial Products

Published Nov 23, 2017 · Updated Jul 9, 2024 · Revision 24

Vendor: Siemens Product: Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller Product: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 Product: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P Product: SIMATIC Compact Field Unit Product: SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) Product: SIMATIC ET 200M (incl. SIPLUS variants) Product: SIMATIC ET 200MP IM 155-5 PN BA (6ES7155-5AA00-0AA0) Product: SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) Product: SIMATIC ET 200MP IM 155-5 PN ST (6ES7155-5AA00-0AB0) Product: SIMATIC ET 200pro IM 154-3 PN HF (6ES7154-3AB00-0AB0) Product: SIMATIC ET 200pro IM 154-4 PN HF (6ES7154-4AB10-0AB0) Product: SIMATIC ET 200SP IM 155-6 PN BA (6ES7155-6AR00-0AN0) Product: SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) Product: SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0) Product: SIMATIC ET 200SP IM 155-6 PN HS (6ES7155-6AU00-0DN0) Product: SIMATIC ET 200SP IM 155-6 PN ST (6ES7155-6AU00-0BN0) Product: SIMATIC ET 200SP IM 155-6 PN ST (6ES7155-6AU01-0BN0) Product: SIMATIC ET 200SP IM 155-6 PN ST BA (6ES7155-6AA00-0BN0) Product: SIMATIC ET 200SP IM 155-6 PN ST BA (6ES7155-6AA01-0BN0) Product: SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 (6ES7141-6BH00-0AB0) Product: SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 (6ES7142-6BH00-0AB0) Product: SIMATIC ET200ecoPN, 4AO U/I 4xM12 (6ES7145-6HD00-0AB0) Product: SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 (6ES7147-6BG00-0AB0) Product: SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 (6ES7142-6BR00-0AB0) Product: SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 (6ES7144-6KD50-0AB0) Product: SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 (6ES7144-6KD00-0AB0) Product: SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 (6ES7141-6BF00-0AB0) Product: SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 (6ES7141-6BG00-0AB0) Product: SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 (6ES7142-6BF50-0AB0) +57 more

Summary

Several industrial products are affected by a vulnerability that could allow remote attackers to conduct a denial of service attack by sending specially crafted packets to port 161/udp (SNMP).

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #24

    Listed affected products individually instead of product families (e.g., for SIMATIC ET 200AL/MP/SP/pro IM families); added affected SIPLUS devices (e.g., SIPLUS ET 200xx IM)

  2. #23

    Clarified that no remediation is planned for ET200 devices

  3. #22

    Clarified affected ET200ecoPN models

  4. #21

    Updated solution for SIMATIC ET200SP IM155-6 PN HS

  5. #20

    Added ecoPN model (6ES7148-6JG00-0BB0) as not affected

  6. #19

    Added SIMATIC ET200ecoPN product variants (MLFB IDs) that are not affected

  7. #18

    Added SIMATIC TDC CP51M1 and CPU555 to the list of affected products

  8. #17

    Mention that SIMATIC S7-400 CPU family below V6 is vulnerable

  9. #16

    SIPLUS devices now explicitly mentioned in the list of affected products

  10. #15

    Renamed SIMATIC WinAC RTX 2010 incl. F to SIMATIC WinAC RTX (F) 2010 and added update information for SIMATIC WinAC RTX (F) 2010

  11. #14

    Update for SINUMERIK 840D sl

  12. #13

    Updated solution for SIMATIC ET 200SP IM155-6 PN HA

  13. #12

    Updated solution for SIMATIC S7-300

  14. #11

    Updated solution for SIMATIC ET 200MP IM155-5 PN HF

  15. #10

    Updated solution for SINAMICS S120, added solution for PN/PN Coupler, SIMATIC ET200 SP, SIMATIC S7-400 V8, SIMOCODE pro V PROFINET

  16. #9

    Added update for SIMATIC S7-1200 CPU

  17. #8

    Added update for SINAMICS DCP w. PN and SINAMICS DCM w. PN

  18. #7

    Added update information for V4.7 of SINAMICS G130, G150, S120 and S150

  19. #6

    Added update information for V4.8 of SINAMICS G130, G150, S120 and S150

  20. #5

    Added update for SIMATIC ET 200MP IM155-5 PN ST, SIMOTION P V4.4 and V4.5, and Development/Evaluation Kits for PROFINET IO DK Standard Ethernet Controller and EK-ERTEC 200, Corrected patch link for SIMOTION D

  21. #4

    Added update for S7-400 V7 and SIMATIC ET 200MP IM155-5 PN BA

  22. #3

    New advisory format, added update information for SINAMICS V90 w. PN, SINAMICS S120 and SINAMICS S110 w. PN

  23. #2

    Changed affected products: V2.0 and newer of SIMATIC S7-1500 and V2.0 and newer of SIMATIC S7-1500 Software Controller are not affected. Added update information for SIMATIC S7-400 H V6

  24. #1

    Publication Date

References