Summary
Several models of SINAMICS PERFECT HARMONY GH180 Drives are affected by a memory protection bypass vulnerability in the integrated S7-1500 or S7-1200 CPU that could allow an attacker to write arbitrary data and code to protected memory areas or read sensitive data to launch further attacks on the CPU.
Siemens provides new drives with the fix included and recommends specific countermeasures for older drives. The list of affected drive models can be found in the section "Additional Information".
Vulnerabilities 1
-
Critical 9.8
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open C…
Revision history
-
#2
Added solution for affected SINAMICS PERFECT HARMONY GH180 Drives
-
#1
Publication Date
References
-
SSA-434535: Memory Protection Bypass Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-434535.pdf
-
SSA-434535: Memory Protection Bypass Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-434535.txt