Skip to content
OpenAdvisories
High SSA-434535 1 CVE

SSA-434535: Memory Protection Bypass Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives

Published Jul 13, 2021 · Updated Sep 14, 2021 · Revision 2

Summary

Several models of SINAMICS PERFECT HARMONY GH180 Drives are affected by a memory protection bypass vulnerability in the integrated S7-1500 or S7-1200 CPU that could allow an attacker to write arbitrary data and code to protected memory areas or read sensitive data to launch further attacks on the CPU.

Siemens provides new drives with the fix included and recommends specific countermeasures for older drives. The list of affected drive models can be found in the section "Additional Information".

Vulnerabilities 1

Revision history

  1. #2

    Added solution for affected SINAMICS PERFECT HARMONY GH180 Drives

  2. #1

    Publication Date

References