Siemens SIMATIC S7-400
SIMATIC S7-400 CPU devices contain an input validation vulnerability that could allow an attacker to create a Denial-of-Service condition. A restart is needed to restore normal operations. Siemens has released an update for SIMATIC S7-410 V10 CPU family and SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants for both) and recommends to update to the latest version. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-40368US | medium5.0 | — | ||
A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 PN/DP V7 (All versi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-557541: Denial-of-Service Vulnerability in SIMATIC S7-400 CPUs - CSAF Versionself
- SSA-557541: Denial-of-Service Vulnerability in SIMATIC S7-400 CPUs - HTML Versionself
- SSA-557541: Denial-of-Service Vulnerability in SIMATIC S7-400 CPUs - PDF Versionself
- SSA-557541: Denial-of-Service Vulnerability in SIMATIC S7-400 CPUs - TXT Versionself
- ICS Advisory ICSA-22-104-12 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-104-12 - Web Versionself
- Recommended Practicesexternal
Behebungen (40)
- Mitigation SIMATIC S7-400 CPU 412-1 DP V7 (6ES7412-1XJ07-0AB0)
Limit access to port 102/tcp to trusted users and systems only
- Mitigation SIMATIC S7-400 CPU 412-2 DP V7 (6ES7412-2XK07-0AB0)
Limit access to port 102/tcp to trusted users and systems only
- Mitigation SIMATIC S7-400 CPU 412-2 PN/DP V7 (6ES7412-2EK07-0AB0)
Limit access to port 102/tcp to trusted users and systems only
- Mitigation SIMATIC S7-400 CPU 414-2 DP V7 (6ES7414-2XL07-0AB0)
Limit access to port 102/tcp to trusted users and systems only
- Mitigation SIMATIC S7-400 CPU 414-3 DP V7 (6ES7414-3XM07-0AB0)
Limit access to port 102/tcp to trusted users and systems only
- Mitigation SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0)
Limit access to port 102/tcp to trusted users and systems only
- Mitigation SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0)
Limit access to port 102/tcp to trusted users and systems only
- Mitigation SIMATIC S7-400 CPU 416-2 DP V7 (6ES7416-2XP07-0AB0)
Limit access to port 102/tcp to trusted users and systems only
- Mitigation SIMATIC S7-400 CPU 416-3 DP V7 (6ES7416-3XS07-0AB0)
Limit access to port 102/tcp to trusted users and systems only
- Mitigation SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0)
Limit access to port 102/tcp to trusted users and systems only
- Mitigation SIMATIC S7-400 CPU 416F-2 DP V7 (6ES7416-2FP07-0AB0)
Limit access to port 102/tcp to trusted users and systems only
- Mitigation SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0)
Limit access to port 102/tcp to trusted users and systems only
- Mitigation SIMATIC S7-400 CPU 417-4 DP V7 (6ES7417-4XT07-0AB0)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIPLUS S7-400 CPU 416-3 V7 (6AG1416-3XS07-7AB0)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIPLUS S7-400 CPU 417-4 V7 (6AG1417-4XT07-7AB0)
Limit access to port 102/tcp to trusted users and systems only
- Kein Fix geplant SIMATIC S7-400 CPU 412-1 DP V7 (6ES7412-1XJ07-0AB0)
Currently no fix is planned
- Kein Fix geplant SIMATIC S7-400 CPU 412-2 DP V7 (6ES7412-2XK07-0AB0)
Currently no fix is planned
- Kein Fix geplant SIMATIC S7-400 CPU 414-2 DP V7 (6ES7414-2XL07-0AB0)
Currently no fix is planned
- Kein Fix geplant SIMATIC S7-400 CPU 414-3 DP V7 (6ES7414-3XM07-0AB0)
Currently no fix is planned
- Kein Fix geplant SIMATIC S7-400 CPU 416-2 DP V7 (6ES7416-2XP07-0AB0)
Currently no fix is planned
- Kein Fix geplant SIMATIC S7-400 CPU 416-3 DP V7 (6ES7416-3XS07-0AB0)
Currently no fix is planned
- Kein Fix geplant SIMATIC S7-400 CPU 416F-2 DP V7 (6ES7416-2FP07-0AB0)
Currently no fix is planned
- Kein Fix geplant SIMATIC S7-400 CPU 417-4 DP V7 (6ES7417-4XT07-0AB0)
Currently no fix is planned
- Kein Fix geplantSIPLUS S7-400 CPU 416-3 V7 (6AG1416-3XS07-7AB0)
Currently no fix is planned
- Kein Fix geplantSIPLUS S7-400 CPU 417-4 V7 (6AG1417-4XT07-7AB0)
Currently no fix is planned
- Behoben SIMATIC S7-400 CPU 412-2 PN/DP V7 (6ES7412-2EK07-0AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - Behoben SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - Behoben SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - Behoben SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - Behoben SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - BehobenSIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)
Update to V6.0.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109474550/ - BehobenSIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)
Update to V10.1 or later version To obtain SIMATIC S7-410 V10.1 contact your local support.
- BehobenSIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)
Update to V8.2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109476571/ - BehobenSIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - BehobenSIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan