Skip to content
OpenAdvisories
High SSA-892915 2 CVEs

SSA-892915: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products

Published Dec 12, 2023 · Updated Dec 12, 2023

Vendor: Siemens Product: SIMATIC PC-Station Plus Product: SIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0) Product: SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0) Product: SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0) Product: SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0) Product: SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0) Product: SINAMICS S120 (incl. SIPLUS variants) Product: SIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0) Product: SIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)

Summary

Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver to perform a denial of service attack.

Siemens has released a new version for SINAMICS S120 (incl. SIPLUS variants) and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 2

Revision history

  1. #1

    Publication date

References