Siemens SINUMERIK
A vulnerability has been identified in the integrated S7-1500 CPU of SINUMERIK ONE and SINUMERIK MC products that could allow an attacker to cause a denial of service condition. In order to exploit the vulnerability, an attacker must have access to the affected devices on port 102/tcp. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Note: The affected integrated S7-1500 CPUs and related products are advised in [1]. [1] https://cert-portal.siemens.com/productcert/html/ssa-592380.html
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-46156US | — | — | ||
Affected devices improperly handle specially crafted packets sent to port 102/tcp.
This could allow an attacker to create a denial of service condition. A restart is needed to res… | ||||
references
External citations — patches, advisories, analysis.
- SSA-280603: Denial of Service Vulnerability in SINUMERIK ONE and SINUMERIK MC - CSAF Versionself
- SSA-280603: Denial of Service Vulnerability in SINUMERIK ONE and SINUMERIK MC - HTML Versionself
- ICS Advisory ICSA-23-348-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-348-11 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationSINUMERIK MC
Expose port 102/tcp of the integrated S7-1500 CPU only to trusted network environments
- MitigationSINUMERIK ONE
Expose port 102/tcp of the integrated S7-1500 CPU only to trusted network environments
- FixedSINUMERIK MC
Update to V1.24 or later version
- FixedSINUMERIK ONE
Update to V6.24 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan