SSA-969738

csafDEsiemens_psirt

SSA-969738: Denial of Service Vulnerability in SIMATIC S7-200 SMART Devices

view advisory published 2024-09-10

A vulnerability in SIMATIC S7-200 SMART devices could allow an attacker to cause a denial of service condition if a specially crafted TCP packet is sent to the device. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-43647US——
A vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All versions), SIMATIC S7-200 SMART CPU CR60 (6ES7288-1CR60-0AA0) (All versions), SIMATIC…
02

references

External citations — patches, advisories, analysis.

03

remediations (36)

  • MitigationSIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU CR60 (6ES7288-1CR60-0AA0)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA0)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA1)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA0)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA1)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA0)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA1)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA0)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA1)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA0)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA1)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA0)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA1)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA0)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA1)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA0)

    Limit network access to trusted users and systems only

  • MitigationSIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA1)

    Limit network access to trusted users and systems only

  • No fix plannedSIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU CR60 (6ES7288-1CR60-0AA0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA1)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA1)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA1)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA1)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA1)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA1)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA1)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA0)

    Currently no fix is planned

  • No fix plannedSIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA1)

    Currently no fix is planned

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan