Skip to content
OpenAdvisories
High SSA-593272 1 CVE

SSA-593272: SegmentSmack in Interniche IP-Stack based Industrial Devices

Published Apr 14, 2020 · Updated Jul 8, 2025 · Revision 16

Vendor: Siemens Product: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 Product: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P Product: KTK ATE530S Product: SIDOOR ATD430W Product: SIDOOR ATE530S COATED Product: SIDOOR ATE531S Product: SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) Product: SIMATIC ET 200eco PN, AI 8xRTD/TC, M12-L (6ES7144-6JF00-0BB0) Product: SIMATIC ET 200eco PN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0) Product: SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0) Product: SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0) Product: SIMATIC ET 200eco PN, DI 16x24VDC, M12-L (6ES7141-6BH00-0BB0) Product: SIMATIC ET 200eco PN, DI 8x24VDC, M12-L (6ES7141-6BG00-0BB0) Product: SIMATIC ET 200eco PN, DIQ 16x24VDC/2A, M12-L (6ES7143-6BH00-0BB0) Product: SIMATIC ET 200eco PN, DQ 8x24VDC/0,5A, M12-L (6ES7142-6BG00-0BB0) Product: SIMATIC ET 200eco PN, DQ 8x24VDC/2A, M12-L (6ES7142-6BR00-0BB0) Product: SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) Product: SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0) Product: SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0) Product: SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) Product: SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0) Product: SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0) Product: SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0) Product: SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) Product: SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0) Product: SIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0) Product: SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0) Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) +43 more

Summary

A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions.

The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which can lead to a Denial-of-Service.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #16

    Added fix for SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)

  2. #15

    Added fix for SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)

  3. #14

    Added fix for SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0) and SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0)

  4. #13

    Listed affected products individually instead of product families (e.g., for SIMATIC ET 200AL/MP/SP/pro IM families); added affected SIPLUS devices (e.g., SIPLUS ET 200xx IM)

  5. #12

    Added fix for several SIMATIC ET200ecoPN devices

  6. #11

    Added additional SIMATIC ET200ecoPN products (CM 4x IO-Link, M12-L / CM 8x IO-Link, M12-L / AI 8xRTD/TC, M12-L) to the list of affected products

  7. #10

    Removed fix for SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) and added SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) to the list of affected products

  8. #9

    Added fix for SIMATIC S7-410 CPU family (incl. SIPLUS variants)

  9. #8

    Added SIMATIC S7-1200 CPU family, ET200SP/MP/AL/EcoPN and PN/xx Coupler to the list of affected products

  10. #7

    Cleanup due to template changes, no change of contents

  11. #6

    Updated fix and mitigation measures for SIMATIC S7-300 and S7-400

  12. #5

    Added mitigation measure for SIMATIC S7-300 and S7-400

  13. #4

    No remediation planned for SIMATIC ET200 devices

  14. #3

    Added Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 (P) to the list of affected products

  15. #2

    Added SIMATIC S7-400 H V6 CPU family and below to the list of affected products

  16. #1

    Publication Date

References