SSA-593272

csafDEsiemens_psirt

SSA-593272: SegmentSmack in Interniche IP-Stack based Industrial Devices

Advisory ansehen veröffentlicht 2020-04-14

A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which can lead to a Denial-of-Service. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-19300UShigh7.5—
A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR AT…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (72)

  • Kein Fix geplantDevelopment/Evaluation Kits for PROFINET IO: EK-ERTEC 200

    Currently no fix is planned

  • Kein Fix geplantDevelopment/Evaluation Kits for PROFINET IO: EK-ERTEC 200P

    Currently no fix is planned

  • Kein Fix geplantKTK ATE530S

    Currently no fix is planned

  • Kein Fix geplantSIDOOR ATD430W

    Currently no fix is planned

  • Kein Fix geplantSIDOOR ATE530S COATED

    Currently no fix is planned

  • Kein Fix geplantSIDOOR ATE531S

    Currently no fix is planned

  • Kein Fix geplantSIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC MICRO-DRIVE PDC

    Currently no fix is planned

  • Kein Fix geplantSIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC TDC CP51M1

    Currently no fix is planned

  • Kein Fix geplantSIMATIC TDC CPU555

    Currently no fix is planned

  • Kein Fix geplantSIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0)

    Currently no fix is planned

  • Kein Fix geplantSINAMICS S/G Control Unit w. PROFINET

    Currently no fix is planned

  • Kein Fix geplantSIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-7AC0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS ET 200S IM 151-8 PN/DP CPU (6AG1151-8AB01-7AB0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS ET 200S IM 151-8F PN/DP CPU (6AG1151-8FB01-2AB0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-2CN0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-4CN0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-2CN0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-7CN0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU00-1CN0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU01-1CN0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS ET 200SP IM 155-6 PN HF TX RAIL (6AG2155-6AU01-4CN0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0)

    Currently no fix is planned

  • BehobenSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)

    Update to V2.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109759122/
  • BehobenSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)

    Update to V2.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109759122/
  • BehobenSIMATIC ET 200eco PN, AI 8xRTD/TC, M12-L (6ES7144-6JF00-0BB0)

    Update to V5.1.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109955667/
  • BehobenSIMATIC ET 200eco PN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0)

    Update to V5.1.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109975865/
  • BehobenSIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0)

    Update to V5.1.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109798522/
  • BehobenSIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0)

    Update to V5.1.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109975868/
  • BehobenSIMATIC ET 200eco PN, DI 16x24VDC, M12-L (6ES7141-6BH00-0BB0)

    Update to V5.1.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109955667/
  • BehobenSIMATIC ET 200eco PN, DI 8x24VDC, M12-L (6ES7141-6BG00-0BB0)

    Update to V5.1.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109955667/
  • BehobenSIMATIC ET 200eco PN, DIQ 16x24VDC/2A, M12-L (6ES7143-6BH00-0BB0)

    Update to V5.1.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109798530/
  • BehobenSIMATIC ET 200eco PN, DQ 8x24VDC/0,5A, M12-L (6ES7142-6BG00-0BB0)

    Update to V5.1.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109955667/
  • BehobenSIMATIC ET 200eco PN, DQ 8x24VDC/2A, M12-L (6ES7142-6BR00-0BB0)

    Update to V5.1.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109955667/
  • BehobenSIMATIC S7-1200 CPU family (incl. SIPLUS variants)

    Update to V4.5.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109793280/
  • BehobenSIMATIC S7-1500 CPU family (incl. related ET 200 CPUs and SIPLUS variants)

    Update to V2.8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109773807/
  • BehobenSIMATIC S7-1500 Software Controller

    Update to V20.8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109772864/
  • BehobenSIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)

    Update to V10.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109773044/
  • BehobenSIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)

    Update to V8.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109476571/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan