ICSA-20-105-08

icsaUScisa_csaf_ot

Siemens KTK, SIDOOR, SIMATIC, and SINAMICS (Update D)

view advisory published 2020-04-14

A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which can lead to a Denial-of-Service. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-19300UShigh7.5—
A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR AT…
02

references

External citations — patches, advisories, analysis.

03

remediations (72)

  • No fix plannedDevelopment/Evaluation Kits for PROFINET IO: EK-ERTEC 200

    Currently no fix is planned

  • No fix plannedDevelopment/Evaluation Kits for PROFINET IO: EK-ERTEC 200P

    Currently no fix is planned

  • No fix plannedKTK ATE530S

    Currently no fix is planned

  • No fix plannedSIDOOR ATD430W

    Currently no fix is planned

  • No fix plannedSIDOOR ATE530S COATED

    Currently no fix is planned

  • No fix plannedSIDOOR ATE531S

    Currently no fix is planned

  • No fix plannedSIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0)

    Currently no fix is planned

  • No fix plannedSIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0)

    Currently no fix is planned

  • No fix plannedSIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0)

    Currently no fix is planned

  • No fix plannedSIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0)

    Currently no fix is planned

  • No fix plannedSIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0)

    Currently no fix is planned

  • No fix plannedSIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)

    Currently no fix is planned

  • No fix plannedSIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0)

    Currently no fix is planned

  • No fix plannedSIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0)

    Currently no fix is planned

  • No fix plannedSIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0)

    Currently no fix is planned

  • No fix plannedSIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0)

    Currently no fix is planned

  • No fix plannedSIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0)

    Currently no fix is planned

  • No fix plannedSIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0)

    Currently no fix is planned

  • No fix plannedSIMATIC MICRO-DRIVE PDC

    Currently no fix is planned

  • No fix plannedSIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0)

    Currently no fix is planned

  • No fix plannedSIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)

    Currently no fix is planned

  • No fix plannedSIMATIC TDC CP51M1

    Currently no fix is planned

  • No fix plannedSIMATIC TDC CPU555

    Currently no fix is planned

  • No fix plannedSIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0)

    Currently no fix is planned

  • No fix plannedSIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0)

    Currently no fix is planned

  • No fix plannedSINAMICS S/G Control Unit w. PROFINET

    Currently no fix is planned

  • No fix plannedSIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0)

    Currently no fix is planned

  • No fix plannedSIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-7AC0)

    Currently no fix is planned

  • No fix plannedSIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0)

    Currently no fix is planned

  • No fix plannedSIPLUS ET 200S IM 151-8 PN/DP CPU (6AG1151-8AB01-7AB0)

    Currently no fix is planned

  • No fix plannedSIPLUS ET 200S IM 151-8F PN/DP CPU (6AG1151-8FB01-2AB0)

    Currently no fix is planned

  • No fix plannedSIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-2CN0)

    Currently no fix is planned

  • No fix plannedSIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-4CN0)

    Currently no fix is planned

  • No fix plannedSIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-2CN0)

    Currently no fix is planned

  • No fix plannedSIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-7CN0)

    Currently no fix is planned

  • No fix plannedSIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU00-1CN0)

    Currently no fix is planned

  • No fix plannedSIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU01-1CN0)

    Currently no fix is planned

  • No fix plannedSIPLUS ET 200SP IM 155-6 PN HF TX RAIL (6AG2155-6AU01-4CN0)

    Currently no fix is planned

  • No fix plannedSIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0)

    Currently no fix is planned

  • No fix plannedSIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0)

    Currently no fix is planned

  • No fix plannedSIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0)

    Currently no fix is planned

  • No fix plannedSIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0)

    Currently no fix is planned

  • No fix plannedSIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0)

    Currently no fix is planned

  • No fix plannedSIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0)

    Currently no fix is planned

  • FixedSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)

    Update to V2.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109759122/
  • FixedSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)

    Update to V2.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109759122/
  • FixedSIMATIC ET 200eco PN, AI 8xRTD/TC, M12-L (6ES7144-6JF00-0BB0)

    Update to V5.1.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109955667/
  • FixedSIMATIC ET 200eco PN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0)

    Update to V5.1.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109975865/
  • FixedSIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0)

    Update to V5.1.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109798522/
  • FixedSIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0)

    Update to V5.1.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109975868/
  • FixedSIMATIC ET 200eco PN, DI 16x24VDC, M12-L (6ES7141-6BH00-0BB0)

    Update to V5.1.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109955667/
  • FixedSIMATIC ET 200eco PN, DI 8x24VDC, M12-L (6ES7141-6BG00-0BB0)

    Update to V5.1.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109955667/
  • FixedSIMATIC ET 200eco PN, DIQ 16x24VDC/2A, M12-L (6ES7143-6BH00-0BB0)

    Update to V5.1.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109798530/
  • FixedSIMATIC ET 200eco PN, DQ 8x24VDC/0,5A, M12-L (6ES7142-6BG00-0BB0)

    Update to V5.1.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109955667/
  • FixedSIMATIC ET 200eco PN, DQ 8x24VDC/2A, M12-L (6ES7142-6BR00-0BB0)

    Update to V5.1.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109955667/
  • FixedSIMATIC S7-1200 CPU family (incl. SIPLUS variants)

    Update to V4.5.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109793280/
  • FixedSIMATIC S7-1500 CPU family (incl. related ET 200 CPUs and SIPLUS variants)

    Update to V2.8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109773807/
  • FixedSIMATIC S7-1500 Software Controller

    Update to V20.8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109772864/
  • FixedSIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)

    Update to V10.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109773044/
  • FixedSIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)

    Update to V8.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109476571/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan