Description
Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller | All versions < V4.1.1 Patch 05 | — |
| Siemens | Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 | All versions < V4.5 | — |
| Siemens | Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P | All versions < V4.5 | — |
| Siemens | SIMATIC Compact Field Unit | All versions | — |
| Siemens | SIMATIC ET 200AL IM 157-1 PN | < V1.0.2 | V1.0.2 |
| Siemens | SIMATIC ET 200M (incl. SIPLUS variants) | All versions | — |
| Siemens | SIMATIC ET 200MP IM 155-5 PN BA | < V4.0.2 | V4.0.2 |
| Siemens | SIMATIC ET 200MP IM 155-5 PN HF | < V4.2.0 | V4.2.0 |
| Siemens | SIMATIC ET 200MP IM 155-5 PN ST | < V4.1.0 | V4.1.0 |
| Siemens | SIMATIC ET 200pro IM 154-3 PN HF | — | — |
| Siemens | SIMATIC ET 200pro IM 154-4 PN HF | — | — |
| Siemens | SIMATIC ET 200SP IM 155-6 PN BA | — | — |
| Siemens | SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) | All versions < V1.1.0 | — |
| Siemens | SIMATIC ET 200SP IM 155-6 PN HF | < V4.2.0 | V4.2.0 |
| Siemens | SIMATIC ET 200SP IM 155-6 PN HS | < V4.0.1 | V4.0.1 |
| Siemens | SIMATIC ET 200SP IM 155-6 PN ST | — | — |
| Siemens | SIMATIC ET 200SP IM 155-6 PN ST BA | — | — |
| Siemens | SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 4AO U/I 4xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN: IO-Link Master | All versions | — |
| Siemens | SIMATIC ET200S (incl. SIPLUS variants) | All versions | — |
| Siemens | SIMATIC PN/PN Coupler (incl. SIPLUS NET variants) | All versions < V4.2.0 | — |
| Siemens | SIMATIC S7-1200 CPU family (incl. SIPLUS variants) | All versions < V4.2.3 | — |
| Siemens | SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) | All versions < V2.0 | — |
| Siemens | SIMATIC S7-1500 Software Controller | All versions < V2.0 | — |
| Siemens | SIMATIC S7-200 SMART | All versions < V2.03.01 | — |
| Siemens | SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) | < V3.X.16 | V3.X.16 |
| Siemens | SIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants) | < V6.0.8 | V6.0.8 |
| Siemens | SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) | < V6.0.6 | V6.0.6 |
| Siemens | SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) | < V7.0.2 | V7.0.2 |
| Siemens | SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) | All versions < V8.2.1 | — |
| Siemens | SIMATIC TDC CP51M1 | < V1.1.8 | V1.1.8 |
| Siemens | SIMATIC TDC CPU555 | < V1.1.1 | V1.1.1 |
| Siemens | SIMATIC WinAC RTX 2010 | All versions < V2010 SP3 | — |
| Siemens | SIMATIC WinAC RTX F 2010 | All versions < V2010 SP3 | — |
| Siemens | SIMOCODE pro V PROFINET (incl. SIPLUS variants) | All versions < V2.1.1 | — |
| Siemens | SIMOTION C | All versions < V5.1 HF1 | — |
| Siemens | SIMOTION D | All versions < V5.1 HF1 | — |
| Siemens | SIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants) | All versions < V4.4 HF26 | — |
| Siemens | SIMOTION P V4.4 and V4.5 | All versions < V4.5 HF5 | — |
| Siemens | SIMOTION P V5 | All versions < V5.1 HF1 | — |
| Siemens | SINAMICS DCM w. PN | All versions < V1.4 SP1 HF6 | — |
| Siemens | SINAMICS DCP w. PN | All versions < V1.2 HF2 | — |
| Siemens | SINAMICS G110M w. PN | All versions < V4.7 SP9 HF1 | — |
| Siemens | SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants) | All versions < V4.7 SP9 HF1 | — |
| Siemens | SINAMICS G130 V4.7 w. PN | All versions < V4.7 HF29 | — |
| Siemens | SINAMICS G130 V4.8 w. PN | All versions < V4.8 HF4 | — |
| Siemens | SINAMICS G150 V4.7 w. PN | All versions < V4.7 HF29 | — |
| Siemens | SINAMICS G150 V4.8 w. PN | All versions < V4.8 HF4 | — |
| Siemens | SINAMICS GH150 V4.7 w. PROFINET | All versions < V4.7 SP5 HF7 | — |
| Siemens | SINAMICS GL150 V4.7 w. PROFINET | All versions < V4.8 SP2 | — |
| Siemens | SINAMICS GM150 V4.7 w. PROFINET | All versions < V4.7 HF31 | — |
| Siemens | SINAMICS S110 w. PN | All versions < V4.4 SP3 HF6 | — |
| Siemens | SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants) | All versions < V4.7 | — |
| Siemens | SINAMICS S120 V4.7 SP1 w. PN (incl. SIPLUS variants) | All versions | — |
| Siemens | SINAMICS S120 V4.7 w. PN (incl. SIPLUS variants) | All versions < V4.7 HF29 | — |
| Siemens | SINAMICS S120 V4.8 w. PN (incl. SIPLUS variants) | All versions < V4.8 HF5 | — |
| Siemens | SINAMICS S150 V4.7 w. PN | All versions < V4.7 HF29 | — |
| Siemens | SINAMICS S150 V4.8 w. PN | All versions < V4.8 HF4 | — |
| Siemens | SINAMICS SL150 V4.7.0 w. PROFINET | All versions < V4.7 HF30 | — |
| Siemens | SINAMICS SL150 V4.7.4 w. PROFINET | All versions < V4.8 SP2 | — |
| Siemens | SINAMICS SL150 V4.7.5 w. PROFINET | All versions < V4.8 SP2 | — |
| Siemens | SINAMICS SM120 V4.7 w. PROFINET | All versions < V4.8 SP2 | — |
| Siemens | SINAMICS V90 w. PN | All versions < V1.02 | — |
| Siemens | SINUMERIK 840D sl | All versions < V4.8 SP3 | — |
| Siemens | SIPLUS ET 200MP IM 155-5 PN HF | < V4.2.0 | V4.2.0 |
| Siemens | SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL | < V4.2.0 | V4.2.0 |
| Siemens | SIPLUS ET 200MP IM 155-5 PN ST | < V4.1.0 | V4.1.0 |
| Siemens | SIPLUS ET 200MP IM 155-5 PN ST TX RAIL | < V4.1.0 | V4.1.0 |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF | < V4.2.0 | V4.2.0 |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL | < V4.2.0 | V4.2.0 |
| Siemens | SIPLUS ET 200SP IM 155-6 PN ST | — | — |
| Siemens | SIPLUS ET 200SP IM 155-6 PN ST BA | — | — |
| Siemens | SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL | — | — |
| Siemens | SIPLUS ET 200SP IM 155-6 PN ST TX RAIL | — | — |
| Siemens | SIRIUS Soft Starter 3RW44 PN | All versions | — |
Advisories 4
- ICSA-17-339-01 Siemens Industrial Products (Update S) CISA ICS & IT advisories · Jul 9, 2024
- SSA-346262 SSA-346262: Denial of Service Vulnerability in SNMP Interface of Industrial Products Siemens ProductCERT · Jul 9, 2024
- ICSA-19-099-01 Siemens SIMOCODE pro V EIP CISA ICS & IT advisories · Feb 10, 2020
- ICSA-18-128-01 Siemens Medium Voltage SINAMICS Products (Update A) CISA ICS & IT advisories · Feb 10, 2020
References
- 101964 vdb-entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-346262.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-141614.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-346262.html
- https://cert-portal.siemens.com/productcert/html/ssa-546832.html
- https://cert-portal.siemens.com/productcert/html/ssa-141614.html