Skip to content
OpenAdvisories
Medium SSA-592007 1 CVE

SSA-592007: Denial of Service Vulnerability in Industrial Products

Published Mar 20, 2018 · Updated May 9, 2023 · Revision 12

Vendor: Siemens Product: SIMATIC CP 343-1 (incl. SIPLUS variants) Product: SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) Product: SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) Product: SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) Product: SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) Product: SIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0) Product: SIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0) Product: SIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) Product: SIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0) Product: SIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0) Product: SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) Product: SIMATIC S7-1500 Software Controller Product: SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0) Product: SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0) Product: SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0) Product: SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0) Product: SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0) Product: SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0) Product: SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0) Product: SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0) Product: SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0) Product: SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0) Product: SIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0) Product: SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0) Product: SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0) Product: SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0) Product: SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0) Product: SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) Product: SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants) +16 more

Summary

Several industrial controllers are affected by a security vulnerability that could allow an attacker to cause a denial of service condition via PROFINET DCP network packets under certain circumstances. Precondition for this scenario is a direct OSI Layer 2 access to the affected products. PROFIBUS interfaces are not affected.

Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #12

    Added fix for SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants); expanded SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) to individual products and MLFBs; reviewed CVSS score and description of CVE-2018-4843

  2. #11

    Added fix for SIMATIC CP 443-1 and CP 443-1 Advanced

  3. #10

    SIMATIC S7-300 CPU family expanded with product specific designations, patch links and MLFBs; No fix planned for SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)

  4. #9

    Clarify no fix planned for SIMATIC CP 343-1 Advanced (incl. SIPLUS variants)

  5. #8

    No fix planned for SIMATIC CP 343-1 and SIMATIC CP 443-1 Advanced

  6. #7

    SIPLUS devices now explicitly mentioned in the list of affected products

  7. #6

    Renamed SIMATIC WinAC RTX 2010 incl. F to SIMATIC WinAC RTX (F) 2010 and added update information for SIMATIC WinAC RTX (F) 2010

  8. #5

    Added update for S7-400 H V6

  9. #4

    Added update for SIMATIC S7-300 incl. F and T

  10. #3

    Added update for SINUMERIK 828D

  11. #2

    Removed SINUMERIK 840D sl from affected products

  12. #1

    Publication Date

References