ICSA-15-064-04

icsaUScisa_csaf_ot

Siemens SIMATIC S7-300 CPU Denial-of-Service Vulnerability

view advisory published 2015-12-06

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2015-2177UShigh7.8Exploit
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 102 or (2) Profibus.
02

references

External citations — patches, advisories, analysis.

03

remediations (1)

  • MitigationSIMATIC S7-300 CPU family

    Apply cell protection concept,Operational Guidelines for Industrial Security, https://www.siemens.com/cert/operational-guidelines-industrial-security, web site last accessed March 05, 2015.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan