Description
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SINAMICS PERFECT HARMONY GH180 Drives (Drives manufactured before 2021-08-13), SINUMERIK MC (All versions < V6.15), SINUMERIK ONE (All versions < V6.15). Affected devices are vulnerable to a memory protection bypass through a specific operation. A remote unauthenticated attacker with network access to port 102/tcp could potentially write arbitrary data and code to protected memory areas or read sensitive data to launch further attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC Drive Controller family | All versions < V2.9.2 | — |
| Siemens | SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) | All versions | — |
| Siemens | SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) | All versions < V21.9 | — |
| Siemens | SIMATIC S7-1200 CPU family (incl. SIPLUS variants) | All versions < V4.5.0 | — |
| Siemens | SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) | All versions < V2.9.2 | — |
| Siemens | SIMATIC S7-1500 Software Controller | All versions < V21.9 | — |
| Siemens | SIMATIC S7-PLCSIM Advanced | All versions < V4.0 | — |
| Siemens | SINAMICS PERFECT HARMONY GH180 Drives | Drives manufactured before 2021-08-13 | — |
| Siemens | SINUMERIK MC | All versions < V6.15 | — |
| Siemens | SINUMERIK ONE | All versions < V6.15 | — |
Advisories 8
- FSA-202405 Festo: Siemens S7-1500/ET200SP CPU used in Festo Didactic products contains a memory protection bypass vulnerability CERT@VDE · Nov 5, 2025
- ICSA-21-194-17 Siemens SINUMERIK ONE and SINUMERIK MC (Update A) CISA ICS & IT advisories · May 6, 2025
- ICSA-21-152-01 Siemens SIMATIC S7-1200 and S7-1500 CPU Families (Update A) CISA ICS & IT advisories · May 6, 2025
- ICSA-25-182-01 FESTO Didactic CP, MPS 200, and MPS 400 Firmware CISA ICS & IT advisories · Sep 9, 2024
- ICSA-21-194-13 Siemens SINAMICS PERFECT HARMONY GH180 (Update A) CISA ICS & IT advisories · Sep 14, 2021
- SSA-434534 SSA-434534: Memory Protection Bypass Vulnerability in SIMATIC S7-1200 and S7-1500 CPU Families Siemens ProductCERT · Sep 14, 2021
- SSA-434535 SSA-434535: Memory Protection Bypass Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives Siemens ProductCERT · Sep 14, 2021
- SSA-434536 SSA-434536: Memory Protection Bypass Vulnerability in SINUMERIK ONE and SINUMERIK MC Siemens ProductCERT · Sep 14, 2021