Skip to content
OpenAdvisories
High SSA-349422 1 CVE

SSA-349422: Denial of Service Vulnerability in Industrial Real-Time (IRT) Devices

Published Oct 8, 2019 · Updated Feb 11, 2025 · Revision 13

Vendor: Siemens Product: Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller Product: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 Product: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P Product: SCALANCE X-200IRT family (incl. SIPLUS NET variants) Product: SIMATIC CP 1604 (6GK1160-4AA01) Product: SIMATIC CP 1616 (6GK1161-6AA02) Product: SIMATIC ET 200M (incl. SIPLUS variants) Product: SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) Product: SIMATIC ET 200MP IM 155-5 PN ST (6ES7155-5AA00-0AB0) Product: SIMATIC ET 200pro IM 154-3 PN HF (6ES7154-3AB00-0AB0) Product: SIMATIC ET 200pro IM 154-4 PN HF (6ES7154-4AB10-0AB0) Product: SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0) Product: SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0) Product: SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) Product: SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0) Product: SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0) Product: SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0) Product: SIMATIC ET 200SP IM 155-6 PN ST (6ES7155-6AU00-0BN0) Product: SIMATIC ET 200SP IM 155-6 PN ST BA (6ES7155-6AA00-0BN0) Product: SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 (6ES7141-6BH00-0AB0) Product: SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 (6ES7142-6BH00-0AB0) Product: SIMATIC ET200ecoPN, 4AO U/I 4xM12 (6ES7145-6HD00-0AB0) Product: SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 (6ES7147-6BG00-0AB0) Product: SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 (6ES7142-6BR00-0AB0) Product: SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 (6ES7144-6KD50-0AB0) Product: SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 (6ES7144-6KD00-0AB0) Product: SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 (6ES7141-6BF00-0AB0) Product: SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 (6ES7141-6BG00-0AB0) Product: SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 (6ES7142-6BF50-0AB0) +61 more

Summary

A vulnerability in the affected products could allow an unauthorized attacker with network access to perform a denial-of-service attack resulting in loss of real-time synchronization.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #13

    Added fix for SINAMICS G150 and SINAMICS S150

  2. #12

    Listed affected products individually instead of product families (e.g., for SIMATIC ET 200AL/MP/SP/pro IM families); added affected SIPLUS devices (e.g., SIPLUS ET 200xx IM)

  3. #11

    Removed SIMATIC S7-400 CPU devices without fix, as they do not support PROFINET and are not affected

  4. #10

    SIMATIC S7-400 CPU family expanded and fix added for supported versions, no fix planned for other S7-400 versions

  5. #9

    SIMATIC S7-300 CPU family expanded with product specific designations, patch links and MLFBs. Added fix for SINUMERIK 840D sl.

  6. #8

    Clarified that no remediation is planned for ET200 devices

  7. #7

    Clarified affected ET200ecoPN models

  8. #6

    Added additional SIMATIC ET200ecoPN model (6ES7148-6JG00-0BB0) as not affected

  9. #5

    Added SIMATIC ET200ecoPN product variants (MLFB IDs) that are not affected

  10. #4

    Added solution for SIMATIC S7-300 CPU family

  11. #3

    Added solution for SINAMICS DCP

  12. #2

    Added solution for SINAMICS SL150 V4.7, SIPLUS devices now explicitly mentioned in the list of affected products, correction in section "Workarounds and Mitigations"

  13. #1

    Publication Date

References