SSA-384224: Denial of Service Vulnerability in SIMATIC HMI Panels
Several SIMATIC HMI Panels are affected by a vulnerability that could allow an attacker to cause a permanent denial of service condition (requiring a device reboot) by sending specially crafted TCP packets. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-40227US | high7.5 | — | ||
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V17 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V17 Update 4)… | ||||
references
External citations — patches, advisories, analysis.
remediations (20)
- FixedSIMATIC HMI Comfort Panels (incl. SIPLUS variants)
Update to V17 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - FixedSIMATIC HMI KTP Mobile Panels
Update to V17 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - FixedSIMATIC HMI KTP1200 Basic (6AV2123-2MB03-0AX0)
Update to V17 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - FixedSIMATIC HMI KTP400 Basic (6AV2123-2DB03-0AX0)
Update to V17 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - FixedSIMATIC HMI KTP700 Basic (6AV2123-2GB03-0AX0)
Update to V17 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - FixedSIMATIC HMI KTP900 Basic (6AV2123-2JB03-0AX0)
Update to V17 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - FixedSIPLUS HMI KTP1200 BASIC (6AG1123-2MB03-2AX0)
Update to V17 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - FixedSIPLUS HMI KTP400 BASIC (6AG1123-2DB03-2AX0)
Update to V17 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - FixedSIPLUS HMI KTP700 BASIC (6AG1123-2GB03-2AX0)
Update to V17 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - FixedSIPLUS HMI KTP900 BASIC (6AG1123-2JB03-2AX0)
Update to V17 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - WorkaroundSIMATIC HMI Comfort Panels (incl. SIPLUS variants)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIMATIC HMI KTP Mobile Panels
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIMATIC HMI KTP1200 Basic (6AV2123-2MB03-0AX0)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIMATIC HMI KTP400 Basic (6AV2123-2DB03-0AX0)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIMATIC HMI KTP700 Basic (6AV2123-2GB03-0AX0)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIMATIC HMI KTP900 Basic (6AV2123-2JB03-0AX0)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIPLUS HMI KTP1200 BASIC (6AG1123-2MB03-2AX0)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIPLUS HMI KTP400 BASIC (6AG1123-2DB03-2AX0)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIPLUS HMI KTP700 BASIC (6AG1123-2GB03-2AX0)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIPLUS HMI KTP900 BASIC (6AG1123-2JB03-2AX0)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan