Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update D)
Several industrial controllers are affected by a security vulnerability that could allow an attacker to cause a denial of service condition via PROFINET DCP network packets under certain circumstances. Precondition for this scenario is a direct OSI Layer 2 access to the affected products. PROFIBUS interfaces are not affected. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-4843US | medium6.1 | — | ||
A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU… | ||||
references
External citations — patches, advisories, analysis.
- SSA-592007: Denial of Service Vulnerability in Industrial Products - CSAF Versionself
- SSA-592007: Denial of Service Vulnerability in Industrial Products - HTML Versionself
- SSA-592007: Denial of Service Vulnerability in Industrial Products - PDF Versionself
- SSA-592007: Denial of Service Vulnerability in Industrial Products - TXT Versionself
- ICS Advisory ICSA-18-079-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-18-079-02 - Web Versionself
- Recommended Practicesexternal
remediations (90)
- Mitigation SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0)
Use VPN for protecting network communication between cells.
- Mitigation SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0)
Use VPN for protecting network communication between cells.
- Mitigation SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0)
Use VPN for protecting network communication between cells.
- Mitigation SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC CP 343-1 (incl. SIPLUS variants)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-1500 Software Controller
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-410 CPU family (incl. SIPLUS variants)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0)
Use VPN for protecting network communication between cells.
- MitigationSINUMERIK 828D
Use VPN for protecting network communication between cells.
- MitigationSIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)
Use VPN for protecting network communication between cells.
- MitigationSoftnet PROFINET IO for PC-based Windows systems
Use VPN for protecting network communication between cells.
- No fix plannedSIMATIC CP 343-1 (incl. SIPLUS variants)
Currently no fix is planned
- No fix plannedSIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Currently no fix is planned
- No fix plannedSoftnet PROFINET IO for PC-based Windows systems
Currently no fix is planned
- Fixed SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - Fixed SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - Fixed SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - Fixed SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - FixedSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/47353723/ - FixedSIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/47354354/ - FixedSIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/47354502/ - FixedSIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/47354578/ - FixedSIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/62612377/ - FixedSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Update to V1.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/ - FixedSIMATIC S7-1500 Software Controller
Update to V1.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478528/ - FixedSIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0)
Update to V3.3.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/51466769/ - FixedSIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/40360647/ - FixedSIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/40944925/ - FixedSIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/85049260/ - FixedSIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/40362228/ - FixedSIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/40945128/ - FixedSIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/85059804/ - FixedSIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/85063017/ - FixedSIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/44442927/ - FixedSIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/44443101/ - FixedSIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - FixedSIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)
Update to V6.0.9
https://support.industry.siemens.com/cs/ww/en/view/109474550 - FixedSIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants)
Update to V6.0.7
https://support.industry.siemens.com/cs/ww/en/view/109474874 - FixedSIMATIC S7-410 CPU family (incl. SIPLUS variants)
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109476571 - FixedSIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0)
Update to V2010 SP3 or later version and apply BIOS and Microsoft Windows updates
https://support.industry.siemens.com/cs/ww/en/view/109765109/ - FixedSIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0)
Update to V2010 SP3 or later version and apply BIOS and Microsoft Windows updates
https://support.industry.siemens.com/cs/ww/en/view/109765109/ - FixedSINUMERIK 828D
Update to V4.7 SP6 HF1 or later version SINUMERIK software can be obtained from your local Siemens account manager
- FixedSIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/47353723/ - FixedSIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/47354354/ - FixedSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0)
Update to V3.3.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/51466769/ - FixedSIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/40360647/ - FixedSIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/40944925/ - FixedSIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/40362228/ - FixedSIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/40945128/ - FixedSIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - FixedSIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan