Skip to content
OpenAdvisories
High SSA-978220 2 CVEs

SSA-978220: Denial of Service Vulnerability over SNMP in Multiple Industrial Products

Published Feb 11, 2020 · Updated Apr 11, 2023 · Revision 9

Vendor: Siemens Product: IE/PB link PN IO (6GK1411-5AB10) Product: SCALANCE S602 Product: SCALANCE S612 Product: SCALANCE S623 Product: SCALANCE S627-2M Product: SIMATIC CP 1623 (6GK1162-3AA00) Product: SIMATIC CP 1626 (6GK1162-6AA01) Product: SIMATIC CP 1628 (6GK1162-8AA00) Product: SIMATIC CP 343-1 Advanced (6GK7343-1GX31-0XE0) Product: SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) Product: SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) Product: SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) Product: SIMATIC CP 443-1 OPC UA (6GK7443-1UX00-0XE0) Product: SIPLUS NET CP 343-1 Advanced (6AG1343-1GX31-4XE0) Product: SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) Product: SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) Product: SIPLUS NET IE/PB link PN IO (6AG1411-5AB10-2AA0) Product: SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) Product: TIM 1531 IRC (6GK7543-1MX00-0XE0)

Summary

Several industrial products are affected by a vulnerability that could allow remote attackers to conduct a denial of service attack by sending specially crafted packets to port 161/udp (SNMP).

Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 2

  • High 7.5
    CVE-2015-5621 Public exploit EPSS 38%

    The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsn…

    net-snmp net-snmp Debian Ubuntu
  • Unscored —
    CVE-2018-18065 Public exploit EPSS 18%

    _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by…

    net-snmp net-snmp Debian Ubuntu

Revision history

  1. #9

    Added fix for SIMATIC CP 443-1 and CP 443-1 Advanced

  2. #8

    No fix planned for SIMATIC CP 343-1 Advanced

  3. #7

    Updated remediation for SIMATIC CP 1623

  4. #6

    No remediation planned for SIMATIC CP 443-1 OPC UA, SIMATIC CP 343-1 Advanced, SIPLUS NET CP 343-1 Advanced

  5. #5

    Added solution for SCALANCE S602, SCALANCE S612, SCALANCE S623, and SCALANCE S627-2M

  6. #4

    Added solution for SIMATIC NET CP 1626

  7. #3

    Informed about successor products for the SCALANCE S-600 family

  8. #2

    Added solution for IE/PB LINK PN IO

  9. #1

    Publication Date

References