ICSA-22-104-12

icsaUScisa_csaf_ot

Siemens SIMATIC S7-400

view advisory published 2022-04-12

SIMATIC S7-400 CPU devices contain an input validation vulnerability that could allow an attacker to create a Denial-of-Service condition. A restart is needed to restore normal operations. Siemens has released an update for SIMATIC S7-410 V10 CPU family and SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants for both) and recommends to update to the latest version. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-40368USmedium5.0—
A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 PN/DP V7 (All versi…
02

references

External citations — patches, advisories, analysis.

03

remediations (40)

  • Mitigation SIMATIC S7-400 CPU 412-1 DP V7 (6ES7412-1XJ07-0AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • Mitigation SIMATIC S7-400 CPU 412-2 DP V7 (6ES7412-2XK07-0AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • Mitigation SIMATIC S7-400 CPU 412-2 PN/DP V7 (6ES7412-2EK07-0AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • Mitigation SIMATIC S7-400 CPU 414-2 DP V7 (6ES7414-2XL07-0AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • Mitigation SIMATIC S7-400 CPU 414-3 DP V7 (6ES7414-3XM07-0AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • Mitigation SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • Mitigation SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • Mitigation SIMATIC S7-400 CPU 416-2 DP V7 (6ES7416-2XP07-0AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • Mitigation SIMATIC S7-400 CPU 416-3 DP V7 (6ES7416-3XS07-0AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • Mitigation SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • Mitigation SIMATIC S7-400 CPU 416F-2 DP V7 (6ES7416-2FP07-0AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • Mitigation SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • Mitigation SIMATIC S7-400 CPU 417-4 DP V7 (6ES7417-4XT07-0AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • MitigationSIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)

    Limit access to port 102/tcp to trusted users and systems only

  • MitigationSIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)

    Limit access to port 102/tcp to trusted users and systems only

  • MitigationSIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)

    Limit access to port 102/tcp to trusted users and systems only

  • MitigationSIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • MitigationSIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • MitigationSIPLUS S7-400 CPU 416-3 V7 (6AG1416-3XS07-7AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • MitigationSIPLUS S7-400 CPU 417-4 V7 (6AG1417-4XT07-7AB0)

    Limit access to port 102/tcp to trusted users and systems only

  • No fix planned SIMATIC S7-400 CPU 412-1 DP V7 (6ES7412-1XJ07-0AB0)

    Currently no fix is planned

  • No fix planned SIMATIC S7-400 CPU 412-2 DP V7 (6ES7412-2XK07-0AB0)

    Currently no fix is planned

  • No fix planned SIMATIC S7-400 CPU 414-2 DP V7 (6ES7414-2XL07-0AB0)

    Currently no fix is planned

  • No fix planned SIMATIC S7-400 CPU 414-3 DP V7 (6ES7414-3XM07-0AB0)

    Currently no fix is planned

  • No fix planned SIMATIC S7-400 CPU 416-2 DP V7 (6ES7416-2XP07-0AB0)

    Currently no fix is planned

  • No fix planned SIMATIC S7-400 CPU 416-3 DP V7 (6ES7416-3XS07-0AB0)

    Currently no fix is planned

  • No fix planned SIMATIC S7-400 CPU 416F-2 DP V7 (6ES7416-2FP07-0AB0)

    Currently no fix is planned

  • No fix planned SIMATIC S7-400 CPU 417-4 DP V7 (6ES7417-4XT07-0AB0)

    Currently no fix is planned

  • No fix plannedSIPLUS S7-400 CPU 416-3 V7 (6AG1416-3XS07-7AB0)

    Currently no fix is planned

  • No fix plannedSIPLUS S7-400 CPU 417-4 V7 (6AG1417-4XT07-7AB0)

    Currently no fix is planned

  • Fixed SIMATIC S7-400 CPU 412-2 PN/DP V7 (6ES7412-2EK07-0AB0)

    Update to V7.0.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109752685/
  • Fixed SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0)

    Update to V7.0.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109752685/
  • Fixed SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0)

    Update to V7.0.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109752685/
  • Fixed SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0)

    Update to V7.0.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109752685/
  • Fixed SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0)

    Update to V7.0.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109752685/
  • FixedSIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)

    Update to V6.0.10 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109474550/
  • FixedSIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)

    Update to V10.1 or later version To obtain SIMATIC S7-410 V10.1 contact your local support.

  • FixedSIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)

    Update to V8.2.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109476571/
  • FixedSIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0)

    Update to V7.0.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109752685/
  • FixedSIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)

    Update to V7.0.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109752685/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan