Skip to content
OpenAdvisories
Medium SSA-431678 1 CVE

SSA-431678: Denial of Service Vulnerability in SIMATIC S7 CPU Families

Published Feb 11, 2020 · Updated Jan 10, 2023 · Revision 5

Vendor: Siemens Product: SIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0) Product: SIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0) Product: SIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) Product: SIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0) Product: SIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0) Product: SIMATIC S7-1200 CPU family (incl. SIPLUS variants) Product: SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0) Product: SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0) Product: SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0) Product: SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0) Product: SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0) Product: SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0) Product: SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0) Product: SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0) Product: SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0) Product: SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0) Product: SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) Product: SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) Product: SIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0) Product: SIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0) Product: SIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0) Product: SIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0) Product: SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0) Product: SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0) Product: SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0) Product: SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0) Product: SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0)

Summary

SIMATIC S7 CPU families are affected by a vulnerability that could allow remote attackers
to perform a denial of service attack by sending a specially crafted HTTP request to the web server of an
affected device.

Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #5

    No fix planned for remaining products. SIMATIC S7-300 CPU family expanded with product specific designations, patch links and MLFBs

  2. #4

    No fix planned for SIMATIC S7-400 PN/DP V6 and below CPU family

  3. #3

    Added SIMATIC WinAC RTX to the list of affected products

  4. #2

    Updated solution for SIMATIC S7-300 PN/DP CPU family

  5. #1

    Publication Date

References