Description
A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC PCS neo (Administration Console) | All versions < V3.1 SP1 | — |
| Siemens | SINETPLAN | All versions | — |
| Siemens | TIA Portal | V15, V15.1, V16 and V17 | — |
Advisories 2
- ICSA-22-104-16 Siemens TIA Administrator CISA ICS & IT advisories · Jul 12, 2022
- SSA-711829 SSA-711829: Denial of Service Vulnerability in TIA Administrator Siemens ProductCERT · Jul 12, 2022