Medium WID-SEC-2022-2297 4 CVEs

Siemens SIMATIC S7: Mehrere Schwachstellen ermöglichen Denial of Service

Published Dec 12, 2022 · Updated Dec 12, 2022 · de-DE

Vendor: Siemens Product: SIMATIC S7 Product: SIMATIC S7 1200 < 4.6.0 Product: SIMATIC S7 1500 < 3.0.1 Product: SIMATIC S7 PLCSIM < 5.0 Product: SIMATIC S7-1500 Software Controller

Summary

Ein Angreifer kann mehrere Schwachstellen in Siemens SIMATIC S7 ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Die SIMATIC S7 ist eine Serie von SPS (Speicherprogrammierbare Steuerungen) für Automatisierungsanwendungen.

Vulnerabilities 4

High 7.5

CVE-2021-40365

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…

Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP SIMATIC S7-1500 CPU 1513-1 PN SIMATIC Drive Controller CPU 1507D TF ICS / OT

Dec 13, 2022
Medium 5.5

CVE-2021-44694

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…

Siemens SIMATIC S7-1500 CPU 1512C-1 PN SIMATIC Drive Controller CPU 1504D TF SIMATIC S7-1500 CPU 1513F-1 PN ICS / OT

Dec 13, 2022
Medium 4.9

CVE-2021-44693

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…

Siemens SIMATIC S7-1500 CPU 1511C-1 PN SIMATIC S7-1500 CPU 1515T-2 PN SIMATIC S7-1500 CPU 1511T-1 PN ICS / OT

Dec 13, 2022
Medium 4.9

CVE-2021-44695

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…

Siemens SIMATIC S7-1500 CPU 1515F-2 PN SIMATIC S7-1500 CPU 1511F-1 PN SIMATIC S7-1500 CPU 1515TF-2 PN ICS / OT

Dec 13, 2022

Revision history

2022-12-12 #1
Initiale Fassung

References

Siemens Security Advisory vom 2022-12-12
https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf