A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3.X.17), SIMATIC TDC CP51M1 (All versions < V1.1.8), SIMATIC TDC CPU555 (All versions < V1.1.1), SINUMERIK 840D sl (All versions < V4.8.6), SINUMERIK 840D sl (All versions < V4.94). Specially crafted packets sent to port 102/tcp (Profinet) could cause the affected device to go into defect mode. A restart is required in order to recover the system. Successful exploitation requires an attacker to have network access to port 102/tcp, with no authentication. No user interation is required. At the time of advisory publication no public exploitation of this security vulnerability was known.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Vendor
Siemens AG
Product
SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Platforms
Unknown
Default status
Unknown
SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V3.X.17
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC TDC CP51M1
Vendor
Siemens AG
Product
SIMATIC TDC CP51M1
Platforms
Unknown
Default status
Unknown
SIMATIC TDC CP51M1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V1.1.8
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC TDC CPU555
Vendor
Siemens AG
Product
SIMATIC TDC CPU555
Platforms
Unknown
Default status
Unknown
SIMATIC TDC CPU555 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V1.1.1
affected
Unavailable
Unavailable
Unavailable
None listed
SINUMERIK 840D sl
Vendor
Siemens AG
Product
SINUMERIK 840D sl
Platforms
Unknown
Default status
Unknown
SINUMERIK 840D sl · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V4.8.6
affected
Unavailable
Unavailable
Unavailable
None listed
SINUMERIK 840D sl
Vendor
Siemens AG
Product
SINUMERIK 840D sl
Platforms
Unknown
Default status
Unknown
SINUMERIK 840D sl · Scoped product and version facts