SSA-674753

csafDEsiemens_psirt

SSA-674753: Denial-of-Service Vulnerability in ET 200 Devices

Advisory ansehen veröffentlicht 2026-01-13

Siemens ET 200 devices contain a denial-of-service vulnerability that could be triggered by sending a valid S7 protocol Disconnect Request (COTP DR TPDU), causing the device to become unresponsive and require a power cycle to recover. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-40944US——
A vulnerability has been identified in SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) (All versions), SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) (All versions >= V4.2.…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (34)

  • MitigationSIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • MitigationSIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • MitigationSIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • MitigationSIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • MitigationSIMATIC ET 200SP IM 155-6 PN R1 (6ES7155-6AU00-0HM0)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • MitigationSIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • MitigationSIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • MitigationSIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • MitigationSIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • MitigationSIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • MitigationSIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-7AC0)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • MitigationSIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • MitigationSIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-2CN0)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • MitigationSIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-7CN0)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • MitigationSIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU01-1CN0)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • MitigationSIPLUS ET 200SP IM 155-6 PN HF TX RAIL (6AG2155-6AU01-4CN0)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • MitigationSIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0)

    Filter the port 102 of the devices to only accepted connections to/from the IP addresses of machines that are trusted e.g. with an external firewall.

  • Kein Fix geplantSIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-7AC0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0)

    Currently no fix is planned

  • BehobenSIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)

    Update to V1.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109987451/
  • BehobenSIMATIC ET 200SP IM 155-6 PN R1 (6ES7155-6AU00-0HM0)

    Update to V6.0.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109816000/
  • BehobenSIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0)

    Update to V4.2.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109769765/
  • BehobenSIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0)

    Update to V4.2.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109769419/
  • BehobenSIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0)

    Update to V6.0.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109760973/
  • BehobenSIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-2CN0)

    Update to V4.2.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109769765/
  • BehobenSIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-7CN0)

    Update to V4.2.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109769765/
  • BehobenSIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU01-1CN0)

    Update to V4.2.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109769765/
  • BehobenSIPLUS ET 200SP IM 155-6 PN HF TX RAIL (6AG2155-6AU01-4CN0)

    Update to V4.2.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109769765/
  • BehobenSIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0)

    Update to V6.0.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109760973/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan