SSA-910883: DHCP Client Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives

Several models of SINAMICS PERFECT HARMONY GH180 Drives are affected by a DHCP client vulnerability (CVE-2021-29998) in the integrated SCALANCE X206-1 device. The vulnerability could allow an attacker to cause a heap-based buffer overflow on that device and use it to get access to the drive's internal network.

The list of affected drive models can be found in the section "Additional Information" below.

Recently manufactured drives are no longer affected. For older drives, Siemens provides detailed remediation advise via customer support.