Description
A vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75) (All versions). Affected devices expose an unused, unstable http service at port 80/tcp on the Modbus-TCP Ethernet. This could allow an attacker on the same Modbus network to create a denial of service condition that forces the device to reboot.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SENTRON 3KC ATC6 Expansion Module Ethernet | — | — |
Advisories 2
- ICSA-24-074-06 Siemens SENTRON CISA ICS & IT advisories · Mar 12, 2024
- SSA-918992 SSA-918992: Unused HTTP Service on SENTRON 3KC ATC6 Ethernet Module Siemens ProductCERT · Mar 12, 2024