Description
A vulnerability has been identified in SIMATIC RF166C (All versions > V1.1 and < V1.3.2), SIMATIC RF185C (All versions > V1.1 and < V1.3.2), SIMATIC RF186C (All versions > V1.1 and < V1.3.2), SIMATIC RF186CI (All versions > V1.1 and < V1.3.2), SIMATIC RF188C (All versions > V1.1 and < V1.3.2), SIMATIC RF188CI (All versions > V1.1 and < V1.3.2), SIMATIC RF360R (All versions < V2.0), SIMATIC Reader RF610R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF610R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF610R FCC (All versions > V3.0 < V4.0), SIMATIC Reader RF615R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF615R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF615R FCC (All versions > V3.0 < V4.0), SIMATIC Reader RF650R ARIB (All versions > V3.0 < V4.0), SIMATIC Reader RF650R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF650R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF650R FCC (All versions > V3.0 < V4.0), SIMATIC Reader RF680R ARIB (All versions > V3.0 < V4.0), SIMATIC Reader RF680R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF680R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF680R FCC (All versions > V3.0 < V4.0), SIMATIC Reader RF685R ARIB (All versions > V3.0 < V4.0), SIMATIC Reader RF685R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF685R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF685R FCC (All versions > V3.0 < V4.0). Affected devices do not properly handle large numbers of incoming connections. An attacker may leverage this to cause a Denial-of-Service situation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC RF166C | All versions > V1.1 and < V1.3.2 | — |
| Siemens | SIMATIC RF185C | All versions > V1.1 and < V1.3.2 | — |
| Siemens | SIMATIC RF186C | All versions > V1.1 and < V1.3.2 | — |
| Siemens | SIMATIC RF186CI | All versions > V1.1 and < V1.3.2 | — |
| Siemens | SIMATIC RF188C | All versions > V1.1 and < V1.3.2 | — |
| Siemens | SIMATIC RF188CI | All versions > V1.1 and < V1.3.2 | — |
| Siemens | SIMATIC RF360R | All versions < V2.0 | — |
| Siemens | SIMATIC Reader RF610R CMIIT | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF610R ETSI | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF610R FCC | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF615R CMIIT | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF615R ETSI | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF615R FCC | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF650R ARIB | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF650R CMIIT | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF650R ETSI | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF650R FCC | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF680R ARIB | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF680R CMIIT | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF680R ETSI | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF680R FCC | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF685R ARIB | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF685R CMIIT | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF685R ETSI | All versions > V3.0 < V4.0 | — |
| Siemens | SIMATIC Reader RF685R FCC | All versions > V3.0 < V4.0 | — |
Advisories 2
- ICSA-21-159-13 Siemens SIMATIC RFID (Update B) CISA ICS & IT advisories · May 6, 2025
- SSA-787292 SSA-787292: Denial of Service Vulnerability in SIMATIC RFID Readers Siemens ProductCERT · May 10, 2022