Skip to content
OpenAdvisories
High SSA-434534 1 CVE

SSA-434534: Memory Protection Bypass Vulnerability in SIMATIC S7-1200 and S7-1500 CPU Families

Published May 28, 2021 · Updated Sep 14, 2021 · Revision 2

Vendor: Siemens Product: SIMATIC Drive Controller family Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) Product: SIMATIC S7-1200 CPU family (incl. SIPLUS variants) Product: SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) Product: SIMATIC S7-1500 Software Controller Product: SIMATIC S7-PLCSIM Advanced

Summary

SIMATIC S7-1200 and S7-1500 CPU products contain a memory protection bypass vulnerability that could allow an attacker to write arbitrary data and code to protected memory areas or read sensitive data to launch further attacks.

Siemens has released updates for several affected products and strongly recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #2

    Added solution for SIMATIC ET 200SP Open Controller CPU 1515SP PC2 and for SIMATIC S7-1500 Software Controller

  2. #1

    Publication Date

References