SSA-838121: Multiple Denial of Service Vulnerabilities in Industrial Products
Affected SIMATIC firmware contains three vulnerabilities that could allow an unauthenticated attacker to perform a denial of service attack under certain conditions. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not, or not yet available.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-37205US | high7.1 | — | ||
A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (A… | ||||
| CVE-2021-37204US | high7.1 | — | ||
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP… | ||||
| CVE-2021-37185US | high7.1 | — | ||
A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (A… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-838121: Multiple Denial of Service Vulnerabilities in Industrial Products - CSAF Versionself
- SSA-838121: Multiple Denial of Service Vulnerabilities in Industrial Products - HTML Versionself
- SSA-838121: Multiple Denial of Service Vulnerabilities in Industrial Products - PDF Versionself
- SSA-838121: Multiple Denial of Service Vulnerabilities in Industrial Products - TXT Versionself
Behebungen (26)
- Kein Fix geplantSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
Currently no fix is planned
- Kein Fix geplantSIMATIC ET 200SP Open Controller CPU 1515SP PC2 Ready4Linux
Currently no fix is planned
- BehobenSIMATIC Drive Controller family
Update to V2.9.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109773914/ - BehobenSIMATIC Drive Controller family
Update to V2.9.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109773914/ - BehobenSIMATIC Drive Controller family
Update to V2.9.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109773914/ - BehobenSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
Update to V21.9.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759122/ - BehobenSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
Update to V21.9.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759122/ - BehobenSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
Update to V21.9.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759122/ - BehobenSIMATIC S7-1200 CPU family (incl. SIPLUS variants)
Update to V4.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793280/ - BehobenSIMATIC S7-1200 CPU family (incl. SIPLUS variants)
Update to V4.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793280/ - BehobenSIMATIC S7-1200 CPU family (incl. SIPLUS variants)
Update to V4.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793280/ - BehobenSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Update to V2.9.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/ - BehobenSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Update to V2.9.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/ - BehobenSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Update to V2.9.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/ - BehobenSIMATIC S7-1500 Software Controller
Update to V21.9.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478528/ - BehobenSIMATIC S7-1500 Software Controller
Update to V21.9.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478528/ - BehobenSIMATIC S7-1500 Software Controller
Update to V21.9.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478528/ - BehobenSIMATIC S7-PLCSIM Advanced
Update to V4.0 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805271/ - BehobenSIMATIC S7-PLCSIM Advanced
Update to V4.0 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805271/ - BehobenSIMATIC S7-PLCSIM Advanced
Update to V4.0 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805271/ - BehobenSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Update to V2.3.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817397/ - BehobenSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Update to V2.3.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817397/ - BehobenSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Update to V2.3.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817397/ - BehobenTIM 1531 IRC (6GK7543-1MX00-0XE0)
Update to V2.3.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817397/ - BehobenTIM 1531 IRC (6GK7543-1MX00-0XE0)
Update to V2.3.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817397/ - BehobenTIM 1531 IRC (6GK7543-1MX00-0XE0)
Update to V2.3.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817397/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan