Siemens Industrial Products SNMP (Update F)
Several industrial products are affected by a vulnerability that could allow remote attackers to conduct a denial of service attack by sending specially crafted packets to port 161/udp (SNMP). Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-18065US | medium6.5 | Exploit | ||
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to… | ||||
| CVE-2015-5621US | high7.5 | Exploit | ||
The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, whi… | ||||
references
External citations — patches, advisories, analysis.
- SSA-978220: Denial of Service Vulnerability over SNMP in Multiple Industrial Products - CSAF Versionself
- SSA-978220: Denial of Service Vulnerability over SNMP in Multiple Industrial Products - HTML Versionself
- SSA-978220: Denial of Service Vulnerability over SNMP in Multiple Industrial Products - PDF Versionself
- SSA-978220: Denial of Service Vulnerability over SNMP in Multiple Industrial Products - TXT Versionself
- ICS Advisory ICSA-20-042-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-042-02 - Web Versionself
- Recommended Practicesexternal
remediations (76)
- MitigationIE/PB link PN IO (6GK1411-5AB10)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationIE/PB link PN IO (6GK1411-5AB10)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSCALANCE S602
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSCALANCE S602
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSCALANCE S612
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSCALANCE S612
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSCALANCE S623
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSCALANCE S623
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSCALANCE S627-2M
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSCALANCE S627-2M
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIMATIC CP 1623 (6GK1162-3AA00)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIMATIC CP 1623 (6GK1162-3AA00)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIMATIC CP 1626 (6GK1162-6AA01)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIMATIC CP 1626 (6GK1162-6AA01)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIMATIC CP 1628 (6GK1162-8AA00)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIMATIC CP 1628 (6GK1162-8AA00)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIMATIC CP 343-1 Advanced (6GK7343-1GX31-0XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIMATIC CP 343-1 Advanced (6GK7343-1GX31-0XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIMATIC CP 443-1 OPC UA (6GK7443-1UX00-0XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIMATIC CP 443-1 OPC UA (6GK7443-1UX00-0XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIPLUS NET CP 343-1 Advanced (6AG1343-1GX31-4XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIPLUS NET CP 343-1 Advanced (6AG1343-1GX31-4XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIPLUS NET IE/PB link PN IO (6AG1411-5AB10-2AA0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIPLUS NET IE/PB link PN IO (6AG1411-5AB10-2AA0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationTIM 1531 IRC (6GK7543-1MX00-0XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- MitigationTIM 1531 IRC (6GK7543-1MX00-0XE0)
Disable SNMP if supported by the product; disabling SNMP fully mitigates the vulnerability
- No fix plannedSIMATIC CP 343-1 Advanced (6GK7343-1GX31-0XE0)
Currently no fix is planned
- No fix plannedSIMATIC CP 343-1 Advanced (6GK7343-1GX31-0XE0)
Currently no fix is planned
- No fix plannedSIMATIC CP 443-1 OPC UA (6GK7443-1UX00-0XE0)
Currently no fix is planned
- No fix plannedSIMATIC CP 443-1 OPC UA (6GK7443-1UX00-0XE0)
Currently no fix is planned
- No fix plannedSIPLUS NET CP 343-1 Advanced (6AG1343-1GX31-4XE0)
Currently no fix is planned
- No fix plannedSIPLUS NET CP 343-1 Advanced (6AG1343-1GX31-4XE0)
Currently no fix is planned
- FixedIE/PB link PN IO (6GK1411-5AB10)
Update to V4.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780330/ - FixedIE/PB link PN IO (6GK1411-5AB10)
Update to V4.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780330/ - FixedSCALANCE S602
Update to V4.1 Update is only available via Siemens Support contact
- FixedSCALANCE S602
Update to V4.1 Update is only available via Siemens Support contact
- FixedSCALANCE S612
Update to V4.1 Update is only available via Siemens Support contact
- FixedSCALANCE S612
Update to V4.1 Update is only available via Siemens Support contact
- FixedSCALANCE S623
Update to V4.1 Update is only available via Siemens Support contact
- FixedSCALANCE S623
Update to V4.1 Update is only available via Siemens Support contact
- FixedSCALANCE S627-2M
Update to V4.1 Update is only available via Siemens Support contact
- FixedSCALANCE S627-2M
Update to V4.1 Update is only available via Siemens Support contact
- FixedSIMATIC CP 1623 (6GK1162-3AA00)
The updated firmware is contained in SIMATIC NET PC Software V14 Update 14 or later version or SIMATIC NET PC Software V16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775589/ - FixedSIMATIC CP 1623 (6GK1162-3AA00)
The updated firmware is contained in SIMATIC NET PC Software V14 Update 14 or later version or SIMATIC NET PC Software V16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775589/ - FixedSIMATIC CP 1626 (6GK1162-6AA01)
Update to V1.1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792924/ - FixedSIMATIC CP 1626 (6GK1162-6AA01)
Update to V1.1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792924/ - FixedSIMATIC CP 1628 (6GK1162-8AA00)
Update to SIMATIC NET PC Software V16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775589/ - FixedSIMATIC CP 1628 (6GK1162-8AA00)
Update to SIMATIC NET PC Software V16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775589/ - FixedSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIPLUS NET IE/PB link PN IO (6AG1411-5AB10-2AA0)
Update to V4.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780330/ - FixedSIPLUS NET IE/PB link PN IO (6AG1411-5AB10-2AA0)
Update to V4.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780330/ - FixedSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109774204/ - FixedSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109774204/ - FixedTIM 1531 IRC (6GK7543-1MX00-0XE0)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109774204/ - FixedTIM 1531 IRC (6GK7543-1MX00-0XE0)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109774204/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan