SSA-178380: Denial-of-Service Vulnerability in SINUMERIK Controllers
A Denial-of-Service vulnerability found in SINUMERIK Controllers could allow an unauthenticated attacker with network access to the affected devices to cause system failure with total loss of availability. Siemens has released an update for the SINUMERIK 828D and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-37199US | high7.5 | — | ||
A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions < V4.95). Affected devices don't process correctly certain special crafted packet… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- MitigationSINUMERIK 808D
Restrict access to port 102/tcp to trusted systems e.g. with an external firewall
- MitigationSINUMERIK 828D
Restrict access to port 102/tcp to trusted systems e.g. with an external firewall
- No fix availableSINUMERIK 808D
Currently no remediation is available
- FixedSINUMERIK 828D
Update to V4.95 or later version
- WorkaroundSINUMERIK 808D
Apply general workarounds.
- WorkaroundSINUMERIK 828D
Apply general workarounds.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan