Siemens SIMATIC ET 200SP Communication Processors
SIMATIC ET 200SP communication processors (CP 1542SP-1, CP 1542SP-1 IRC and CP 1543SP-1, incl. SIPLUS variants) contain an authentication vulnerability that could allow an unauthenticated remote attacker to access the configuration data. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40771US | —OT elevated | — | ||
A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.4.24), SIM… | ||||
references
External citations — patches, advisories, analysis.
- SSA-486936: Authentication Vulnerability in SIMATIC ET 200SP Communication Processors - CSAF Versionself
- SSA-486936: Authentication Vulnerability in SIMATIC ET 200SP Communication Processors - HTML Versionself
- ICS Advisory ICSA-25-289-07 JSONself
- ICS Advisory ICSA-25-289-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (12)
- MitigationSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Restrict access to the affected systems to trusted IP addresses only
- MitigationSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Restrict access to the affected systems to trusted IP addresses only
- MitigationSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Restrict access to the affected systems to trusted IP addresses only
- MitigationSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Restrict access to the affected systems to trusted IP addresses only
- MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Restrict access to the affected systems to trusted IP addresses only
- MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Restrict access to the affected systems to trusted IP addresses only
- FixedSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Update to V2.4.24 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995159/ - FixedSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Update to V2.4.24 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995159/ - FixedSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Update to V2.4.24 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995159/ - FixedSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Update to V2.4.24 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995159/ - FixedSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Update to V2.4.24 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995159/ - FixedSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Update to V2.4.24 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995159/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan