Skip to content
OpenAdvisories
High SSA-473245 1 CVE

SSA-473245: Denial of Service Vulnerability in Profinet Devices

Published Oct 8, 2019 · Updated Jul 9, 2024 · Revision 18

Vendor: Siemens Product: Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller Product: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 Product: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P Product: SIMATIC CFU PA (6ES7655-5PX11-0XX0) Product: SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) Product: SIMATIC ET 200M (incl. SIPLUS variants) Product: SIMATIC ET 200MP IM 155-5 PN BA (6ES7155-5AA00-0AA0) Product: SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) Product: SIMATIC ET 200MP IM 155-5 PN ST (6ES7155-5AA00-0AB0) Product: SIMATIC ET 200MP IM 155-5 PN ST (6ES7155-5AA01-0AB0) Product: SIMATIC ET 200pro IM 154-3 PN HF (6ES7154-3AB00-0AB0) Product: SIMATIC ET 200pro IM 154-4 PN HF (6ES7154-4AB10-0AB0) Product: SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0) Product: SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0) Product: SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) Product: SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0) Product: SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0) Product: SIMATIC ET 200SP IM 155-6 PN BA (6ES7155-6AR00-0AN0) Product: SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) Product: SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0) Product: SIMATIC ET 200SP IM 155-6 PN HS (6ES7155-6AU00-0DN0) Product: SIMATIC ET 200SP IM 155-6 PN ST (6ES7155-6AU00-0BN0) Product: SIMATIC ET 200SP IM 155-6 PN ST (6ES7155-6AU01-0BN0) Product: SIMATIC ET 200SP IM 155-6 PN ST BA (6ES7155-6AA00-0BN0) Product: SIMATIC ET 200SP IM 155-6 PN ST BA (6ES7155-6AA01-0BN0) Product: SIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0) Product: SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0) Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) Product: SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 (6ES7141-6BH00-0AB0) +91 more

Summary

A vulnerability in affected devices could allow an attacker to perform a denial of service attack if a large amount of specially crafted UDP packets are sent to the device.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #18

    Listed affected products individually instead of product families (e.g., for SIMATIC ET 200AL/MP/SP/pro IM families); added affected SIPLUS devices (e.g., SIPLUS ET 200xx IM)

  2. #17

    Expanded SIMATIC S7-400 V7 CPU family (incl. SIPLUS variants) to individual products and MLFBs; added fix for SIMATIC S7-400 PN/DP V7 CPUs; clarified that other S7-400 V7 CPUs are not affected

  3. #16

    No fix planned for remaining products

  4. #15

    Added fix for SINUMERK 840D sl; no fix planned for PROFINET development/evaluation kits - DK Standard Ethernet Controller and EK-ERTEC 200; SIMATIC S7-300 CPU family expanded with product specific designations, patch links and MLFBs

  5. #14

    No fix planned for SIMATIC S7-400 PN/DP V6 and below CPU family

  6. #13

    Clarified that no remediation is planned for ET200 devices

  7. #12

    Clarified affected ET200ecoPN models

  8. #11

    Added solution for SIMATIC ET200SP IM155-6 PN HS

  9. #10

    Added solution for SIMATIC ET200SP IM155-6 PN HA and added ecoPN model (6ES7148-6JG00-0BB0) as not affected

  10. #9

    Added solution for EK-ERTEC 200P and S7-410 V8

  11. #8

    Added solution for SIMATIC PN/PN Coupler. Added SIMATIC ET200ecoPN product variants (MLFB IDs) that are not affected

  12. #7

    Added SIMATIC TDC CP51M1 and CPU555 to the list of affected products

  13. #6

    Added solution for SIMATIC ET200MP IM155-5 PN HF

  14. #5

    Added solution for SIMATIC S7-300 CPU family

  15. #4

    Added solution for SINAMICS DCP

  16. #3

    Added solution for SIMATIC S7-1200 and S7-1500 Software and Open Controller. SIPLUS devices now explicitly mentioned in the list of affected products

  17. #2

    Added solution for SINAMICS S120 V4.7, SINAMICS S150, SINAMICS G130 V4.7, SINAMICS G150 and SINAMICS SL150 V4.7

  18. #1

    Publication Date

References