Skip to content
OpenAdvisories
Medium SSA-446448 1 CVE

SSA-446448: Denial of Service Vulnerability in PROFINET Stack Integrated on Interniche Stack

Published Apr 12, 2022 · Updated Jan 14, 2025 · Revision 14

Vendor: Siemens Product: SIMATIC CFU DIQ (6ES7655-5PX31-1XX0) Product: SIMATIC CFU PA (6ES7655-5PX11-0XX0) Product: SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) Product: SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) Product: SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0) Product: SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0) Product: SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) Product: SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0) Product: SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0) Product: SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0) Product: SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) Product: SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0) Product: SIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0) Product: SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0) Product: SIMATIC ET200ecoPN, AI 8xRTD/TC, M12-L (6ES7144-6JF00-0BB0) Product: SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0) Product: SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0) Product: SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0) Product: SIMATIC ET200ecoPN, DI 16x24VDC, M12-L (6ES7141-6BH00-0BB0) Product: SIMATIC ET200ecoPN, DI 8x24VDC, M12-L (6ES7141-6BG00-0BB0) Product: SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L (6ES7143-6BH00-0BB0) Product: SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L (6ES7142-6BG00-0BB0) Product: SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L (6ES7142-6BR00-0BB0) Product: SIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0) Product: SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0) Product: SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) Product: SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0) Product: SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0) Product: SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0) +53 more

Summary

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, contains a vulnerability that could allow an attacker to cause a denial of service condition on affected industrial products.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #14

    Added fix for SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0) and SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0)

  2. #13

    Added fix for SINAMICS DCM and SINAMICS V90; clarified that no fix is planned for SINAMICS S110; listed affected products individually instead of product families (e.g., for SIMATIC ET 200AL/MP/SP/pro IM families); added affected SIPLUS devices (e.g., SIPLUS ET 200xx IM)

  3. #12

    Added fix for SINAMICS S210, SIMATIC CFU DIQ and SIMATIC CFU PA

  4. #11

    Added fix for several SIMATIC ET200ecoPN devices

  5. #10

    Added fix for SINAMICS G110M, G115D, G120; Expanded SIMATIC S7-400 V7 CPU family to individual products and MLFBs; clarified that no fix is planned for SIMATIC S7-400 PN/DP V7 CPUs, while other S7-400 V7 CPUs are not affected

  6. #9

    Added fix for SINAMICS G130, G150, S150

  7. #8

    Added additional SIMATIC ET200ecoPN products (CM 4x IO-Link, M12-L / CM 8x IO-Link, M12-L / AI 8xRTD/TC, M12-L) to the list of affected products

  8. #7

    No fix planned for SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants), added fix for SINAMICS S120 (incl. SIPLUS variants)

  9. #6

    Added fix for SIMATIC S7-410 V10 CPU family and SIMATIC TDC

  10. #5

    Added fix for SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants); removed SIMIT Simulation Platform as not affected

  11. #4

    Added fix for SIMATIC S7-410 CPU family

  12. #3

    Added SINAMICS S110/V90/DCM products to the list of affected products. Additional details added to SINAMICS affected versions

  13. #2

    Added ET200SP/MP/AL/EcoPN, PN/xx Coupler, SIPLUS HCS4x00 and SINAMICS products to the list of affected products

  14. #1

    Publication Date

References