SSA-431678

csafDEsiemens_psirt

SSA-431678: Denial of Service Vulnerability in SIMATIC S7 CPU Families

view advisory published 2020-02-11

SIMATIC S7 CPU families are affected by a vulnerability that could allow remote attackers to perform a denial of service attack by sending a specially crafted HTTP request to the web server of an affected device. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-13940UShigh7.5—
A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pr…
02

references

External citations — patches, advisories, analysis.

03

remediations (54)

  • MitigationSIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-1200 CPU family (incl. SIPLUS variants)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0)

    Disable the web server. Note that this feature is disabled by default

  • No fix plannedSIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)

    Currently no fix is planned

  • No fix plannedSIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0)

    Currently no fix is planned

  • No fix plannedSIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0)

    Currently no fix is planned

  • FixedSIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/47353723/
  • FixedSIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/47354354/
  • FixedSIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/47354502/
  • FixedSIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/47354578/
  • FixedSIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/62612377/
  • FixedSIMATIC S7-1200 CPU family (incl. SIPLUS variants)

    Update to V4.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/106200276/
  • FixedSIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/51466769/
  • FixedSIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/40360647/
  • FixedSIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/40944925/
  • FixedSIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/85049260/
  • FixedSIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/40362228/
  • FixedSIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/40945128/
  • FixedSIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/85059804/
  • FixedSIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/85063017/
  • FixedSIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/44442927/
  • FixedSIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/44443101/
  • FixedSIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/47353723/
  • FixedSIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/47354354/
  • FixedSIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/51466769/
  • FixedSIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/40360647/
  • FixedSIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/40944925/
  • FixedSIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/40362228/
  • FixedSIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/40945128/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan