SSA-549234: Denial-of-Service Vulnerability in SIMATIC NET CP Modules
A denial of service vulnerability was identified in different types of Communication Processors. An attacker could exploit this vulnerability causing the device to become un-operational until the device is restarted. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-33737US | high7.8 | — | ||
A vulnerability has been identified in SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 E… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-549234: Denial-of-Service Vulnerability in SIMATIC NET CP Modules - CSAF Versionself
- SSA-549234: Denial-of-Service Vulnerability in SIMATIC NET CP Modules - HTML Versionself
- SSA-549234: Denial-of-Service Vulnerability in SIMATIC NET CP Modules - PDF Versionself
- SSA-549234: Denial-of-Service Vulnerability in SIMATIC NET CP Modules - TXT Versionself
Behebungen (18)
- MitigationSIMATIC CP 343-1 (incl. SIPLUS variants)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIMATIC CP 343-1 ERPC (6GK7343-1FX00-0XE0)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIMATIC CP 343-1 Lean (incl. SIPLUS variants)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)
Limit access to port 102/tcp to trusted users and systems only
- MitigationSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)
Limit access to port 102/tcp to trusted users and systems only
- Kein Fix geplantSIMATIC CP 343-1 (incl. SIPLUS variants)
Currently no fix is planned
- Kein Fix geplantSIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Currently no fix is planned
- Kein Fix geplantSIMATIC CP 343-1 ERPC (6GK7343-1FX00-0XE0)
Currently no fix is planned
- Kein Fix geplantSIMATIC CP 343-1 Lean (incl. SIPLUS variants)
Currently no fix is planned
- BehobenSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - BehobenSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - BehobenSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - BehobenSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - BehobenSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan