Skip to content
OpenAdvisories
Critical SSA-941426 2 CVEs

SSA-941426: Multiple LLDP Vulnerabilities in Industrial Products

Published Jul 13, 2021 · Updated Mar 14, 2023 · Revision 5

Vendor: Siemens Product: SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) Product: SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) Product: SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) Product: SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) Product: SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0) Product: SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) Product: SIMATIC CP 1545-1 (6GK7545-1GX00-0XE0) Product: SIMATIC HMI Unified Comfort Panels Product: SINUMERIK ONE MCP Product: SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) Product: SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) Product: SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) Product: SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0) Product: SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) Product: SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) Product: SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) Product: TIM 1531 IRC (6GK7543-1MX00-0XE0)

Summary

There are multiple vulnerabilities in an underlying Link Layer Discovery Protocol (LLDP) third party library.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 2

Revision history

  1. #5

    Added fix for SIMATIC CP 1542SP-1, SIMATIC CP 1542SP-1 IRC, and SIMATIC CP 1543SP-1

  2. #4

    Added fix for SIMATIC CP 1243-1 and CP 1243-8 IRC

  3. #3

    Added fix for SIMATIC CP 1545-1

  4. #2

    Added solution for SINUMERIK ONE MCP and SIMATIC NET CP 1543-1

  5. #1

    Publication Date

References