Skip to content
OpenAdvisories
High SSA-592380 1 CVE

SSA-592380: Denial of Service Vulnerability in SIMATIC S7-1500 CPUs and related products

Published Dec 12, 2023 · Updated May 14, 2024 · Revision 3

Vendor: Siemens Product: SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0) Product: SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0) Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) Product: SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ00-0AB0) Product: SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0) Product: SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0) Product: SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ00-0AB0) Product: SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0) Product: SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DK03-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK00-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0) Product: SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0) Product: SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Product: SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CL03-0AB0) Product: SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK00-0AB0) Product: SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0) Product: SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0) Product: SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FL03-0AB0) Product: SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0) Product: SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TL03-0AB0) Product: SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0) Product: SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UL03-0AB0) Product: SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0) Product: SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Product: SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CM03-0AB0) Product: SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK00-0AB0) Product: SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0) +121 more

Summary

A vulnerability has been identified in the SIMATIC S7-1500 CPU family and related products that could allow an attacker to cause a denial of service condition. In order to exploit the vulnerability, an attacker must have access to the affected devices on port 102/tcp.

Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #3

    Added fix for SIMATIC ET 200SP Open Controller CPU 1515SP PC2, SIPLUS S7-1500 CPU 1517H-3 PN (6AG1517-3HP00-4AB0) and SIPLUS S7-1500 CPU 1518HF-4 PN (6AG1518-4JP00-4AB0)

  2. #2

    Added fix version information for following SIMATIC S7-1500 CPUs: 1513R-1 PN (6ES7513-1RM03-0AB0), 1515R-2 PN (6ES7515-2RN03-0AB0), 1517H-3 PN (6ES7517-3HP00-0AB0), 1518HF-4 PN (6ES7518-4JP00-0AB0) and SIMATIC S7-1500 Software Controller

  3. #1

    Publication Date

References