Description
Affected devices improperly handle large amounts of specially crafted UDP packets.
This could allow an unauthenticated remote attacker to trigger a denial of service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller | — | — |
| Siemens | Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 | — | — |
| Siemens | Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P | All versions < V4.6 Patch 01 | — |
| Siemens | SIMATIC CFU PA | < V1.2.0 | V1.2.0 |
| Siemens | SIMATIC ET 200AL IM 157-1 PN | All versions | — |
| Siemens | SIMATIC ET 200M (incl. SIPLUS variants) | All versions | — |
| Siemens | SIMATIC ET 200MP IM 155-5 PN BA | < V4.3.0 | V4.3.0 |
| Siemens | SIMATIC ET 200MP IM 155-5 PN HF | < V4.4.0 | V4.4.0 |
| Siemens | SIMATIC ET 200MP IM 155-5 PN ST | — | — |
| Siemens | SIMATIC ET 200pro IM 154-3 PN HF | — | — |
| Siemens | SIMATIC ET 200pro IM 154-4 PN HF | — | — |
| Siemens | SIMATIC ET 200pro IM 154-8 PN/DP CPU | All versions < V3.2.17 | — |
| Siemens | SIMATIC ET 200pro IM 154-8F PN/DP CPU | All versions < V3.2.17 | — |
| Siemens | SIMATIC ET 200pro IM 154-8FX PN/DP CPU | All versions < V3.2.17 | — |
| Siemens | SIMATIC ET 200S IM 151-8 PN/DP CPU | All versions < V3.2.17 | — |
| Siemens | SIMATIC ET 200S IM 151-8F PN/DP CPU | All versions < V3.2.17 | — |
| Siemens | SIMATIC ET 200SP IM 155-6 PN BA | — | — |
| Siemens | SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) | All versions < V1.2.1 | — |
| Siemens | SIMATIC ET 200SP IM 155-6 PN HF | < V4.2.2 | V4.2.2 |
| Siemens | SIMATIC ET 200SP IM 155-6 PN HS | < V4.0.1 | V4.0.1 |
| Siemens | SIMATIC ET 200SP IM 155-6 PN ST | — | — |
| Siemens | SIMATIC ET 200SP IM 155-6 PN ST BA | — | — |
| Siemens | SIMATIC ET 200SP IM 155-6 PN/2 HF | < V4.2.2 | V4.2.2 |
| Siemens | SIMATIC ET 200SP IM 155-6 PN/3 HF | < V4.2.1 | V4.2.1 |
| Siemens | SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) | < V2.0 | V2.0 |
| Siemens | SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 4AO U/I 4xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 | All versions | — |
| Siemens | SIMATIC ET200ecoPN: IO-Link Master | All versions | — |
| Siemens | SIMATIC ET200S (incl. SIPLUS variants) | All versions | — |
| Siemens | SIMATIC HMI Comfort Outdoor Panels (incl. SIPLUS variants) | — | — |
| Siemens | SIMATIC HMI Comfort Panels (incl. SIPLUS variants) | — | — |
| Siemens | SIMATIC HMI KTP Mobile Panels | — | — |
| Siemens | SIMATIC PN/PN Coupler | All versions < V4.2.1 | — |
| Siemens | SIMATIC PROFINET Driver | All versions < V2.1 | — |
| Siemens | SIMATIC S7-1200 CPU family (incl. SIPLUS variants) | All versions < V4.4.0 | — |
| Siemens | SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) | All versions < V2.0 | — |
| Siemens | SIMATIC S7-1500 Software Controller | All versions < V2.0 | — |
| Siemens | SIMATIC S7-300 CPU 314C-2 PN/DP | All versions < V3.2.17 | — |
| Siemens | SIMATIC S7-300 CPU 315-2 PN/DP | All versions < V3.2.17 | — |
| Siemens | SIMATIC S7-300 CPU 315F-2 PN/DP | All versions < V3.2.17 | — |
| Siemens | SIMATIC S7-300 CPU 315T-3 PN/DP | All versions < V3.2.17 | — |
| Siemens | SIMATIC S7-300 CPU 317-2 PN/DP | All versions < V3.2.17 | — |
| Siemens | SIMATIC S7-300 CPU 317F-2 PN/DP | All versions < V3.2.17 | — |
| Siemens | SIMATIC S7-300 CPU 317T-3 PN/DP | All versions < V3.2.17 | — |
| Siemens | SIMATIC S7-300 CPU 317TF-3 PN/DP | All versions < V3.2.17 | — |
| Siemens | SIMATIC S7-300 CPU 319-3 PN/DP | All versions < V3.2.17 | — |
| Siemens | SIMATIC S7-300 CPU 319F-3 PN/DP | All versions < V3.2.17 | — |
| Siemens | SIMATIC S7-400 CPU 412-2 PN V7 | < V7.0.3 | V7.0.3 |
| Siemens | SIMATIC S7-400 CPU 414-3 PN/DP V7 | < V7.0.3 | V7.0.3 |
| Siemens | SIMATIC S7-400 CPU 414F-3 PN/DP V7 | < V7.0.3 | V7.0.3 |
| Siemens | SIMATIC S7-400 CPU 416-3 PN/DP V7 | < V7.0.3 | V7.0.3 |
| Siemens | SIMATIC S7-400 CPU 416F-3 PN/DP V7 | < V7.0.3 | V7.0.3 |
| Siemens | SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) | < V6.0.9 | V6.0.9 |
| Siemens | SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) | — | — |
| Siemens | SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) | All versions < V8.2.2 | — |
| Siemens | SIMATIC TDC CP51M1 | < V1.1.8 | V1.1.8 |
| Siemens | SIMATIC TDC CPU555 | < V1.1.1 | V1.1.1 |
| Siemens | SIMATIC WinAC RTX 2010 | All versions < V2010 SP3 | — |
| Siemens | SIMATIC WinAC RTX F 2010 | All versions < V2010 SP3 | — |
| Siemens | SINAMICS DCM | All versions < V1.5 HF1 | — |
| Siemens | SINAMICS DCP | All versions < V1.3 | — |
| Siemens | SINAMICS G110M V4.7 PN Control Unit | All versions < V4.7 SP10 HF5 | — |
| Siemens | SINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants) | All versions < V4.7 SP10 HF5 | — |
| Siemens | SINAMICS G130 V4.7 Control Unit | All versions < 4.8 | — |
| Siemens | SINAMICS G150 Control Unit | All versions < 4.8 | — |
| Siemens | SINAMICS GH150 V4.7 Control Unit | All versions | — |
| Siemens | SINAMICS GL150 V4.7 Control Unit | All versions | — |
| Siemens | SINAMICS GM150 V4.7 Control Unit | All versions | — |
| Siemens | SINAMICS S110 Control Unit | — | — |
| Siemens | SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants) | — | — |
| Siemens | SINAMICS S150 Control Unit | All versions < 4.8 | — |
| Siemens | SINAMICS SL150 V4.7 Control Unit | All versions < V4.7 HF33 | — |
| Siemens | SINAMICS SM120 V4.7 Control Unit | — | — |
| Siemens | SINUMERIK 828D | All versions < V4.8 SP5 | — |
| Siemens | SINUMERIK 840D sl | All versions < V4.8 SP6 | — |
| Siemens | SIPLUS ET 200MP IM 155-5 PN HF | < V4.4.0 | V4.4.0 |
| Siemens | SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL | < V4.4.0 | V4.4.0 |
| Siemens | SIPLUS ET 200MP IM 155-5 PN ST | — | — |
| Siemens | SIPLUS ET 200MP IM 155-5 PN ST TX RAIL | — | — |
| Siemens | SIPLUS ET 200S IM 151-8 PN/DP CPU | All versions < V3.2.17 | — |
| Siemens | SIPLUS ET 200S IM 151-8F PN/DP CPU | All versions < V3.2.17 | — |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF | < V4.2.2 | V4.2.2 |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL | < V4.2.2 | V4.2.2 |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF TX RAIL | < V4.2.2 | V4.2.2 |
| Siemens | SIPLUS ET 200SP IM 155-6 PN ST | — | — |
| Siemens | SIPLUS ET 200SP IM 155-6 PN ST BA | — | — |
| Siemens | SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL | — | — |
| Siemens | SIPLUS ET 200SP IM 155-6 PN ST TX RAIL | — | — |
| Siemens | SIPLUS NET PN/PN Coupler | All versions < V4.2.1 | — |
| Siemens | SIPLUS S7-300 CPU 314C-2 PN/DP | All versions < V3.3.17 | — |
Advisories 2
- ICSA-19-283-02 Siemens PROFINET Devices (Update K) CISA ICS & IT advisories · Jul 9, 2024
- SSA-473245 SSA-473245: Denial of Service Vulnerability in Profinet Devices Siemens ProductCERT · Jul 9, 2024