SSA-549234: Denial-of-Service Vulnerability in SIMATIC NET CP Modules
A denial of service vulnerability was identified in different types of Communication Processors. An attacker could exploit this vulnerability causing the device to become un-operational until the device is restarted. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-33737US | high7.8 | — | ||
A vulnerability has been identified in SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 E… | ||||
references
External citations — patches, advisories, analysis.
- SSA-549234: Denial-of-Service Vulnerability in SIMATIC NET CP Modules - CSAF Versionself
- SSA-549234: Denial-of-Service Vulnerability in SIMATIC NET CP Modules - HTML Versionself
- SSA-549234: Denial-of-Service Vulnerability in SIMATIC NET CP Modules - PDF Versionself
- SSA-549234: Denial-of-Service Vulnerability in SIMATIC NET CP Modules - TXT Versionself
remediations (18)
- MitigationSIMATIC CP 343-1 (incl. SIPLUS variants)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIMATIC CP 343-1 ERPC (6GK7343-1FX00-0XE0)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIMATIC CP 343-1 Lean (incl. SIPLUS variants)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)
Limit access to port 102/tcp to trusted users and systems only
- No fix plannedSIMATIC CP 343-1 (incl. SIPLUS variants)
Currently no fix is planned
- No fix plannedSIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Currently no fix is planned
- No fix plannedSIMATIC CP 343-1 ERPC (6GK7343-1FX00-0XE0)
Currently no fix is planned
- No fix plannedSIMATIC CP 343-1 Lean (incl. SIPLUS variants)
Currently no fix is planned
- FixedSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - FixedSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan