Vulnerabilites related to siemens - sinamics_g150
CVE-2019-10936 (GCVE-0-2019-10936)
Vulnerability from cvelistv5
Published
2019-10-10 00:00
Modified
2024-08-04 22:40
Severity ?
EPSS score ?
Summary
Affected devices improperly handle large amounts of specially crafted UDP packets.
This could allow an unauthenticated remote attacker to trigger a denial of service condition.
References
Impacted products
{ containers: { adp: [ { affected: [ { cpes: [ "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "dk_standard_ethernet_controller_firmware", vendor: "siemens", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:ek-ertec_200_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ek-ertec_200_firmware", vendor: "siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:ek-ertec_200p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ek-ertec_200p_firmware", vendor: "siemens", versions: [ { lessThan: "4.6", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:simatic_cfu_pa:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_cfu_pa", vendor: "siemens", versions: [ { lessThan: "v1.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_et200ecopn_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_et200ecopn_firmware", vendor: "siemens", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_et200s_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_et200s_firmware", vendor: "siemens", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_et_200al_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_et_200al_firmware", vendor: "siemens", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_et_200m_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_et_200m_firmware", vendor: "siemens", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_et_200mp_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_et_200mp_firmware", vendor: "siemens", versions: [ { lessThan: "v4.3.0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_et_200pro_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_et_200pro_firmware", vendor: "siemens", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_et_200s_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_et_200s_firmware", vendor: "siemens", versions: [ { lessThan: "v3.2.17", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_et_200sp_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_et_200sp_firmware", vendor: "siemens", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:simatic_hmi_comfort_outdoor_panels:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_hmi_comfort_outdoor_panels", vendor: "siemens", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:simatic_pn\\/pn_coupler_6es7158-3ad01-0xa0:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_pn\\/pn_coupler_6es7158-3ad01-0xa0", vendor: "siemens", versions: [ { lessThan: "v4.2.1", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:simatic_profinet_driver:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_profinet_driver", vendor: "siemens", versions: [ { lessThan: "v2.1", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_s7-300_cpu_314_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_s7-300_cpu_314_firmware", vendor: "siemens", versions: [ { lessThan: "v3.2.17", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_s7-300_cpu_315-2_dp_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_s7-300_cpu_315-2_dp_firmware", vendor: "siemens", versions: [ { lessThan: "v3.2.17", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_s7-300_cpu_315f-2_dp_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_s7-300_cpu_315f-2_dp_firmware", vendor: "siemens", versions: [ { lessThan: "v3.2.17", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_s7-300_cpu_317-2_dp_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_s7-300_cpu_317-2_dp_firmware", vendor: "siemens", versions: [ { lessThan: "v3.2.17", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_s7-300_cpu_317-2_pn\\/dp_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_s7-300_cpu_317-2_pn\\/dp_firmware", vendor: "siemens", versions: [ { lessThan: "v3.2.17", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_s7-300_cpu_319-3_pn\\/dp_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_s7-300_cpu_319-3_pn\\/dp_firmware", vendor: "siemens", versions: [ { lessThan: "v3.2.17", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:simatic_s7-400_cpu_412-2_pn:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_s7-400_cpu_412-2_pn", vendor: "siemens", versions: [ { lessThan: "v7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:simatic_s7-400_cpu_414-3_pn\\/dp:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_s7-400_cpu_414-3_pn\\/dp", vendor: "siemens", versions: [ { lessThan: "v7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:simatic_s7-400_cpu_416-3_pn\\/dp:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_s7-400_cpu_416-3_pn\\/dp", vendor: "siemens", versions: [ { lessThanOrEqual: "v7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_s7-400_h_v6_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_s7-400_h_v6_firmware", vendor: "siemens", versions: [ { lessThanOrEqual: "v6.0.9", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_s7-400_pn\\/dp_v6_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_s7-400_pn\\/dp_v6_firmware", vendor: "siemens", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_s7-410_cpu_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_s7-410_cpu_firmware", vendor: "siemens", versions: [ { lessThan: "v8.2.2", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:simatic_s7-1200_cpu:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_s7-1200_cpu", vendor: "siemens", versions: [ { lessThan: "v4.4.0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:simatic_s7-1500_cpu:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_s7-1500_cpu", vendor: "siemens", versions: [ { lessThan: "v2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:simatic_s7-1500_controller:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_s7-1500_controller", vendor: "siemens", versions: [ { lessThan: "v2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_tdc_cp51m1_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_tdc_cp51m1_firmware", vendor: "siemens", versions: [ { lessThan: "v1.1.8", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:siemens:simatic_tdc_cpu555_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_tdc_cpu555_firmware", vendor: "siemens", versions: [ { lessThan: "v1.1.1", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:a:siemens:simatic_winac_rtx_2010:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_winac_rtx_2010", vendor: "siemens", versions: [ { lessThan: "v2010_sp3", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:simatic_winac_rtx_\\(f\\)_2010:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "simatic_winac_rtx_\\(f\\)_2010", vendor: "siemens", versions: [ { lessThan: "v2010_sp3", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:sinamics_dcm:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sinamics_dcm", vendor: "siemens", versions: [ { lessThan: "v1.5_hf1", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sinamics_dcp", vendor: "siemens", versions: [ { lessThan: "v1.3", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:sinamics_g110m:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sinamics_g110m", vendor: "siemens", versions: [ { lessThan: "v4.7_sp10_hf5", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:sinamics_g120:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sinamics_g120", vendor: "siemens", versions: [ { lessThan: "v4.7_sp10_hf5", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sinamics_g130", vendor: "siemens", versions: [ { lessThan: "v4.8", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sinamics_g150", vendor: "siemens", versions: [ { lessThan: "v4.8", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:sinamics_gh150:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sinamics_gh150", vendor: "siemens", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:sinamics_gl150:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sinamics_gl150", vendor: "siemens", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:sinamics_gm150:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sinamics_gm150", vendor: "siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:sinamics_s110:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sinamics_s110", vendor: "siemens", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sinamics_s120", vendor: "siemens", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:sinamics_sl150:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sinamics_sl150", vendor: "siemens", versions: [ { lessThan: "v4.8", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:sinamics_sl150:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sinamics_sl150", vendor: "siemens", versions: [ { lessThan: "v4.7_hf33", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:sinamics_sm120:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sinamics_sm120", vendor: "siemens", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:sinumerik_828d:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sinumerik_828d", vendor: "siemens", versions: [ { lessThan: "v4.8_sp5", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:sinumerik_840d_sl:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sinumerik_840d_sl", vendor: "siemens", versions: [ { lessThan: "v4.8_sp6", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:h:siemens:siplus_s7-300_cpu_314:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "siplus_s7-300_cpu_314", vendor: "siemens", versions: [ { lessThan: "v3.3.17", status: "affected", version: "0", versionType: "custom", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2019-10936", options: [ { Exploitation: "none", }, { Automatable: "yes", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-07-09T14:36:59.481395Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-07-09T15:59:12.602Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, { providerMetadata: { dateUpdated: "2024-08-04T22:40:15.253Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf", }, { tags: [ "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/html/ssa-473245.html", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unknown", product: "Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.6 Patch 01", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CFU PA", vendor: "Siemens", versions: [ { lessThan: "V1.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200AL IM 157-1 PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200M (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200MP IM 155-5 PN BA", vendor: "Siemens", versions: [ { lessThan: "V4.3.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200MP IM 155-5 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.4.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200MP IM 155-5 PN ST", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200MP IM 155-5 PN ST", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM 154-3 PN HF", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM 154-4 PN HF", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM 154-8 PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM 154-8F PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM 154-8FX PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200S IM 151-8 PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200S IM 151-8F PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN BA", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.2.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.2", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN HS", vendor: "Siemens", versions: [ { lessThan: "V4.0.1", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN ST", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN ST", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN ST BA", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN ST BA", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN/2 HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.2", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN/3 HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.1", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "V2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 4AO U/I 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN: IO-Link Master", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200S (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC HMI Comfort Outdoor Panels (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC HMI Comfort Panels (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC HMI KTP Mobile Panels", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC PN/PN Coupler", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.2.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC PROFINET Driver", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-1200 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.4.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-1500 Software Controller", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 314C-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 315-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 315F-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 315T-3 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 317-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 317F-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 317T-3 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 317TF-3 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 319-3 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 319F-3 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 CPU 412-2 PN V7", vendor: "Siemens", versions: [ { lessThan: "V7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 CPU 414-3 PN/DP V7", vendor: "Siemens", versions: [ { lessThan: "V7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 CPU 414F-3 PN/DP V7", vendor: "Siemens", versions: [ { lessThan: "V7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 CPU 416-3 PN/DP V7", vendor: "Siemens", versions: [ { lessThan: "V7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 CPU 416F-3 PN/DP V7", vendor: "Siemens", versions: [ { lessThan: "V7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "V6.0.9", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V8.2.2", }, ], }, { defaultStatus: "unknown", product: "SIMATIC TDC CP51M1", vendor: "Siemens", versions: [ { lessThan: "V1.1.8", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC TDC CPU555", vendor: "Siemens", versions: [ { lessThan: "V1.1.1", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC WinAC RTX 2010", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2010 SP3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC WinAC RTX F 2010", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2010 SP3", }, ], }, { defaultStatus: "unknown", product: "SINAMICS DCM", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.5 HF1", }, ], }, { defaultStatus: "unknown", product: "SINAMICS DCP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.3", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G110M V4.7 PN Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 SP10 HF5", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 SP10 HF5", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G130 V4.7 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < 4.8", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G150 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < 4.8", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GH150 V4.7 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GL150 V4.7 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GM150 V4.7 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S110 Control Unit", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S150 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < 4.8", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SL150 V4.7 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF33", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SM120 V4.7 Control Unit", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SINUMERIK 828D", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP5", }, ], }, { defaultStatus: "unknown", product: "SINUMERIK 840D sl", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP6", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.4.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.4.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.4.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN ST", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN ST", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN ST TX RAIL", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN ST TX RAIL", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200S IM 151-8 PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200S IM 151-8F PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.2", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.2", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.2", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.2", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.2.2", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.2.2", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF TX RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.2.2", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST BA", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST BA", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST TX RAIL", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST TX RAIL", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS NET PN/PN Coupler", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.2.1", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-300 CPU 314C-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.3.17", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-300 CPU 315-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-300 CPU 315F-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-300 CPU 317-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-300 CPU 317F-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-400 CPU 414-3 PN/DP V7", vendor: "Siemens", versions: [ { lessThan: "V7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-400 CPU 416-3 PN/DP V7", vendor: "Siemens", versions: [ { lessThan: "V7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, ], descriptions: [ { lang: "en", value: "Affected devices improperly handle large amounts of specially crafted UDP packets.\r\n\r\nThis could allow an unauthenticated remote attacker to trigger a denial of service condition.", }, ], metrics: [ { cvssV3_1: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-400", description: "CWE-400: Uncontrolled Resource Consumption", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-07-09T12:03:55.957Z", orgId: "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", shortName: "siemens", }, references: [ { url: "https://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf", }, { url: "https://cert-portal.siemens.com/productcert/html/ssa-473245.html", }, ], }, }, cveMetadata: { assignerOrgId: "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", assignerShortName: "siemens", cveId: "CVE-2019-10936", datePublished: "2019-10-10T00:00:00", dateReserved: "2019-04-08T00:00:00", dateUpdated: "2024-08-04T22:40:15.253Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
CVE-2017-12741 (GCVE-0-2017-12741)
Vulnerability from cvelistv5
Published
2017-12-26 04:00
Modified
2024-08-05 18:51
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
8.7 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
8.7 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS score ?
Summary
Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.
References
▼ | URL | Tags |
---|---|---|
https://www.securityfocus.com/bid/101964 | vdb-entry, x_refsource_BID | |
https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf | x_refsource_CONFIRM | |
https://cert-portal.siemens.com/productcert/pdf/ssa-346262.pdf | x_refsource_CONFIRM | |
https://cert-portal.siemens.com/productcert/pdf/ssa-141614.pdf | x_refsource_CONFIRM | |
https://cert-portal.siemens.com/productcert/html/ssa-346262.html | ||
https://cert-portal.siemens.com/productcert/html/ssa-546832.html | ||
https://cert-portal.siemens.com/productcert/html/ssa-141614.html |
Impacted products
Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | Siemens | Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller |
Version: All versions < V4.1.1 Patch 05 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-05T18:51:06.315Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "101964", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "https://www.securityfocus.com/bid/101964", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-346262.pdf", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-141614.pdf", }, { tags: [ "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/html/ssa-346262.html", }, { tags: [ "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/html/ssa-546832.html", }, { tags: [ "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/html/ssa-141614.html", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unknown", product: "Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.1.1 Patch 05", }, ], }, { defaultStatus: "unknown", product: "Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.5", }, ], }, { defaultStatus: "unknown", product: "Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.5", }, ], }, { defaultStatus: "unknown", product: "SIMATIC Compact Field Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200AL IM 157-1 PN", vendor: "Siemens", versions: [ { lessThan: "V1.0.2", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200M (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200MP IM 155-5 PN BA", vendor: "Siemens", versions: [ { lessThan: "V4.0.2", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200MP IM 155-5 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200MP IM 155-5 PN ST", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM 154-3 PN HF", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM 154-4 PN HF", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN BA", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.1.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN HS", vendor: "Siemens", versions: [ { lessThan: "V4.0.1", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN ST", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN ST", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN ST BA", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN ST BA", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 4AO U/I 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN: IO-Link Master", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200S (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.2.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-1200 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.2.3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-1500 Software Controller", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-200 SMART", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.03.01", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "V3.X.16", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "V6.0.8", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "V6.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "V7.0.2", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V8.2.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC TDC CP51M1", vendor: "Siemens", versions: [ { lessThan: "V1.1.8", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC TDC CPU555", vendor: "Siemens", versions: [ { lessThan: "V1.1.1", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC WinAC RTX 2010", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2010 SP3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC WinAC RTX F 2010", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2010 SP3", }, ], }, { defaultStatus: "unknown", product: "SIMOCODE pro V PROFINET (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1.1", }, ], }, { defaultStatus: "unknown", product: "SIMOTION C", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V5.1 HF1", }, ], }, { defaultStatus: "unknown", product: "SIMOTION D", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V5.1 HF1", }, ], }, { defaultStatus: "unknown", product: "SIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.4 HF26", }, ], }, { defaultStatus: "unknown", product: "SIMOTION P V4.4 and V4.5", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.5 HF5", }, ], }, { defaultStatus: "unknown", product: "SIMOTION P V5", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V5.1 HF1", }, ], }, { defaultStatus: "unknown", product: "SINAMICS DCM w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.4 SP1 HF6", }, ], }, { defaultStatus: "unknown", product: "SINAMICS DCP w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.2 HF2", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G110M w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 SP9 HF1", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 SP9 HF1", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G130 V4.7 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF29", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G130 V4.8 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 HF4", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G150 V4.7 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF29", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G150 V4.8 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 HF4", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GH150 V4.7 w. PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 SP5 HF7", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GL150 V4.7 w. PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP2", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GM150 V4.7 w. PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF31", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S110 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.4 SP3 HF6", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V4.7 SP1 w. PN (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V4.7 w. PN (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF29", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V4.8 w. PN (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 HF5", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S150 V4.7 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF29", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S150 V4.8 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 HF4", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SL150 V4.7.0 w. PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF30", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SL150 V4.7.4 w. PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP2", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SL150 V4.7.5 w. PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP2", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SM120 V4.7 w. PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP2", }, ], }, { defaultStatus: "unknown", product: "SINAMICS V90 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.02", }, ], }, { defaultStatus: "unknown", product: "SINUMERIK 840D sl", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP3", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN ST", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN ST TX RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST BA", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST BA", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST TX RAIL", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST TX RAIL", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIRIUS Soft Starter 3RW44 PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, ], descriptions: [ { lang: "en", value: "Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.", }, ], metrics: [ { cvssV3_1: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, }, { cvssV4_0: { baseScore: 8.7, baseSeverity: "HIGH", vectorString: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", version: "4.0", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-400", description: "CWE-400: Uncontrolled Resource Consumption", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-07-09T12:03:53.948Z", orgId: "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", shortName: "siemens", }, references: [ { name: "101964", tags: [ "vdb-entry", "x_refsource_BID", ], url: "https://www.securityfocus.com/bid/101964", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-346262.pdf", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-141614.pdf", }, { url: "https://cert-portal.siemens.com/productcert/html/ssa-346262.html", }, { url: "https://cert-portal.siemens.com/productcert/html/ssa-546832.html", }, { url: "https://cert-portal.siemens.com/productcert/html/ssa-141614.html", }, ], }, }, cveMetadata: { assignerOrgId: "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", assignerShortName: "siemens", cveId: "CVE-2017-12741", datePublished: "2017-12-26T04:00:00", dateReserved: "2017-08-09T00:00:00", dateUpdated: "2024-08-05T18:51:06.315Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
CVE-2019-10923 (GCVE-0-2019-10923)
Vulnerability from cvelistv5
Published
2019-10-10 13:49
Modified
2025-02-11 10:26
Severity ?
EPSS score ?
Summary
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.
References
Impacted products
Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | Siemens | Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller |
Version: All versions < V4.1.1 Patch 05 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-04T22:40:15.265Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-349422.pdf", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unknown", product: "Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.1.1 Patch 05", }, ], }, { defaultStatus: "unknown", product: "Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.5.0 Patch 01", }, ], }, { defaultStatus: "unknown", product: "Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.5.0", }, ], }, { defaultStatus: "unknown", product: "SCALANCE X-200IRT family (incl. SIPLUS NET variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V5.2.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1604", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.8", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1616", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.8", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200M (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200MP IM 155-5 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200MP IM 155-5 PN ST", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM 154-3 PN HF", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM 154-4 PN HF", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM 154-8 PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM 154-8F PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM 154-8FX PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200S IM 151-8 PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200S IM 151-8F PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN ST", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN ST BA", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 4AO U/I 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN: IO-Link Master", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200S (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 314C-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 315-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 315F-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 315T-3 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 317-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 317F-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 317T-3 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 317TF-3 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 319-3 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 319F-3 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 CPU 412-2 PN V7", vendor: "Siemens", versions: [ { lessThan: "V7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 CPU 414-3 PN/DP V7", vendor: "Siemens", versions: [ { lessThan: "V7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 CPU 414F-3 PN/DP V7", vendor: "Siemens", versions: [ { lessThan: "V7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 CPU 416-3 PN/DP V7", vendor: "Siemens", versions: [ { lessThan: "V7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 CPU 416F-3 PN/DP V7", vendor: "Siemens", versions: [ { lessThan: "V7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC WinAC RTX 2010", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2010 SP3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC WinAC RTX F 2010", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2010 SP3", }, ], }, { defaultStatus: "unknown", product: "SIMOTION", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS DCM", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.5 HF1", }, ], }, { defaultStatus: "unknown", product: "SINAMICS DCP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.3", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G110M V4.7 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 SP10 HF5", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G120 V4.7 Control Unit (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 SP10 HF5", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G130", vendor: "Siemens", versions: [ { lessThan: "V4.7 HF29", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G150", vendor: "Siemens", versions: [ { lessThan: "V4.7 HF29", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GH150 V4.7 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GL150 V4.7 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GM150 V4.7 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S110 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V4.7 Control Unit and CBE20 (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF34", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S150", vendor: "Siemens", versions: [ { lessThan: "V4.7 HF29", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SL150 V4.7 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF33", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SM120 V4.7 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINUMERIK 828D", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP5", }, ], }, { defaultStatus: "unknown", product: "SINUMERIK 840D sl", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP5", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN ST", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN ST TX RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200S IM 151-8 PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200S IM 151-8F PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST BA", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST TX RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-300 CPU 314C-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.3.17", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-300 CPU 315-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-300 CPU 315F-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-300 CPU 317-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-300 CPU 317F-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-400 CPU 414-3 PN/DP V7", vendor: "Siemens", versions: [ { lessThan: "V7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-400 CPU 416-3 PN/DP V7", vendor: "Siemens", versions: [ { lessThan: "V7.0.3", status: "affected", version: "0", versionType: "custom", }, ], }, ], descriptions: [ { lang: "en", value: "An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.", }, ], metrics: [ { cvssV3_1: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-400", description: "CWE-400: Uncontrolled Resource Consumption", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2025-02-11T10:26:23.281Z", orgId: "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", shortName: "siemens", }, references: [ { url: "https://cert-portal.siemens.com/productcert/pdf/ssa-349422.pdf", }, { url: "https://cert-portal.siemens.com/productcert/html/ssa-349422.html", }, ], }, }, cveMetadata: { assignerOrgId: "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", assignerShortName: "siemens", cveId: "CVE-2019-10923", datePublished: "2019-10-10T13:49:24", dateReserved: "2019-04-08T00:00:00", dateUpdated: "2025-02-11T10:26:23.281Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
CVE-2019-6568 (GCVE-0-2019-6568)
Vulnerability from cvelistv5
Published
2019-04-17 13:40
Modified
2024-08-04 20:23
Severity ?
EPSS score ?
Summary
The webserver of the affected devices contains a vulnerability that may lead to
a denial of service condition. An attacker may cause a denial of service
situation which leads to a restart of the webserver of the affected device.
The security vulnerability could be exploited by an attacker with network
access to the affected systems. Successful exploitation requires no system
privileges and no user interaction. An attacker could use the vulnerability
to compromise availability of the device.
References
Impacted products
Vendor | Product | Version | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | Siemens | SIMATIC CP 1604 |
Version: All versions |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-04T20:23:22.207Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-480230.pdf", }, { tags: [ "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-530931.pdf", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unknown", product: "SIMATIC CP 1604", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1616", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 343-1 Advanced", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 443-1", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 443-1", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 443-1 Advanced", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 443-1 OPC UA", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM154-8 PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM154-8F PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM154-8FX PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200S IM151-8 PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200S IM151-8F PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1.6", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.7", }, ], }, { defaultStatus: "unknown", product: "SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V15.1 Upd4", }, ], }, { defaultStatus: "unknown", product: "SIMATIC HMI Comfort Panels 4\" - 22\" (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V15.1 Upd4", }, ], }, { defaultStatus: "unknown", product: "SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V15.1 Upd4", }, ], }, { defaultStatus: "unknown", product: "SIMATIC IPC DiagMonitor", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V5.1.3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC RF182C", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC RF185C", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.1.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC RF186C", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.1.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC RF188C", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.1.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC RF600R family", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC RFID 181EIP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.6.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-1500 Software Controller", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.7", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 314C-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.3.16", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 315-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 315F-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 315T-3 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 317-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 317F-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 317T-3 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 317TF-3 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 319-3 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU 319F-3 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-PLCSIM Advanced", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.0 SP1 UPD1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC Teleservice Adapter IE Advanced", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC Teleservice Adapter IE Basic", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC Teleservice Adapter IE Standard", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC WinAC RTX 2010", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2010 SP3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC WinAC RTX F 2010", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2010 SP3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC WinCC Runtime Advanced", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V15.1 Upd4", }, ], }, { defaultStatus: "unknown", product: "SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.1.3", }, ], }, { defaultStatus: "unknown", product: "SIMOCODE pro V PROFINET (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1.3", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G130 V4.6 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G130 V4.7 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G130 V4.7 SP1 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G130 V4.8 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 HF6", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G130 V5.1 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G130 V5.1 SP1 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V5.1 SP1 HF4", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G150 V4.6 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G150 V4.7 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G150 V4.7 SP1 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G150 V4.8 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 HF6", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G150 V5.1 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G150 V5.1 SP1 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V5.1 SP1 HF4", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GH150 V4.7 (Control Unit)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GH150 V4.8 (Control Unit)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP2 HF9", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GL150 V4.7 (Control Unit)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GL150 V4.8 (Control Unit)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP2 HF9", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GM150 V4.7 (Control Unit)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GM150 V4.8 (Control Unit)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP2 HF9", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V4.6 Control Unit (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V4.7 SP1 Control Unit (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V4.8 Control Unit (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 HF6", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V5.1 Control Unit (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V5.1 SP1 Control Unit (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V5.1 SP1 HF4", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S150 V4.6 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S150 V4.7 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S150 V4.7 SP1 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S150 V4.8 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 HF6", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S150 V5.1 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S150 V5.1 SP1 Control Unit", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V5.1 SP1 HF4", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S210", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V5.1 SP1 HF8", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SL150 V4.7 (Control Unit)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF33", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SL150 V4.8 (Control Unit)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SM120 V4.7 (Control Unit)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SM120 V4.8 (Control Unit)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP2 HF10", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SM150 V4.8 (Control Unit)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200S IM151-8 PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200S IM151-8F PN/DP CPU", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIPLUS NET CP 343-1 Advanced", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIPLUS NET CP 443-1", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.3", }, ], }, { defaultStatus: "unknown", product: "SIPLUS NET CP 443-1 Advanced", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.3", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-300 CPU 314C-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.3.16", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-300 CPU 315-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-300 CPU 315F-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-300 CPU 317-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SIPLUS S7-300 CPU 317F-2 PN/DP", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.16", }, ], }, { defaultStatus: "unknown", product: "SITOP Manager", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.1", }, ], }, { defaultStatus: "unknown", product: "SITOP PSU8600", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.5", }, ], }, { defaultStatus: "unknown", product: "SITOP UPS1600 (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.3", }, ], }, { defaultStatus: "unknown", product: "TIM 1531 IRC (incl. SIPLUS NET variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1", }, ], }, ], descriptions: [ { lang: "en", value: "The webserver of the affected devices contains a vulnerability that may lead to\r\na denial of service condition. An attacker may cause a denial of service\r\nsituation which leads to a restart of the webserver of the affected device.\r\n\r\nThe security vulnerability could be exploited by an attacker with network\r\naccess to the affected systems. Successful exploitation requires no system\r\nprivileges and no user interaction. An attacker could use the vulnerability\r\nto compromise availability of the device.", }, ], metrics: [ { cvssV3_1: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-125", description: "CWE-125: Out-of-bounds Read", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2023-05-09T11:51:03.049Z", orgId: "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", shortName: "siemens", }, references: [ { url: "https://cert-portal.siemens.com/productcert/pdf/ssa-480230.pdf", }, { url: "https://cert-portal.siemens.com/productcert/pdf/ssa-530931.pdf", }, ], }, }, cveMetadata: { assignerOrgId: "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", assignerShortName: "siemens", cveId: "CVE-2019-6568", datePublished: "2019-04-17T13:40:24", dateReserved: "2019-01-22T00:00:00", dateUpdated: "2024-08-04T20:23:22.207Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
CVE-2017-2680 (GCVE-0-2017-2680)
Vulnerability from cvelistv5
Published
2017-05-11 01:00
Modified
2024-09-10 09:33
Severity ?
6.5 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.1 (High) - CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
7.1 (High) - CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS score ?
Summary
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.
References
▼ | URL | Tags |
---|---|---|
http://www.securitytracker.com/id/1038463 | vdb-entry, x_refsource_SECTRACK | |
http://www.securityfocus.com/bid/98369 | vdb-entry, x_refsource_BID | |
https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf | x_refsource_CONFIRM | |
https://ics-cert.us-cert.gov/advisories/ICSA-18-023-02 | x_refsource_MISC | |
https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf | x_refsource_CONFIRM | |
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf | x_refsource_CONFIRM | |
https://cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf | x_refsource_MISC | |
https://cert-portal.siemens.com/productcert/html/ssa-293562.html | ||
https://cert-portal.siemens.com/productcert/html/ssa-284673.html | ||
https://cert-portal.siemens.com/productcert/html/ssa-546832.html |
Impacted products
Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | Siemens | Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller |
Version: All versions < V4.1.1 Patch04 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
{ containers: { adp: [ { metrics: [ { other: { content: { id: "CVE-2017-2680", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-07-09T13:26:04.237652Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-07-09T13:26:15.327Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, { providerMetadata: { dateUpdated: "2024-08-05T14:02:07.270Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "1038463", tags: [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred", ], url: "http://www.securitytracker.com/id/1038463", }, { name: "98369", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/98369", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://ics-cert.us-cert.gov/advisories/ICSA-18-023-02", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf", }, { tags: [ "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/html/ssa-293562.html", }, { tags: [ "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/html/ssa-284673.html", }, { tags: [ "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/html/ssa-546832.html", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unknown", product: "Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.1.1 Patch04", }, ], }, { defaultStatus: "unknown", product: "Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.2.1 Patch03", }, ], }, { defaultStatus: "unknown", product: "Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.4.0 Patch01", }, ], }, { defaultStatus: "unknown", product: "Extension Unit 12\" PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V01.01.01", }, ], }, { defaultStatus: "unknown", product: "Extension Unit 15\" PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V01.01.01", }, ], }, { defaultStatus: "unknown", product: "Extension Unit 19\" PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V01.01.01", }, ], }, { defaultStatus: "unknown", product: "Extension Unit 22\" PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V01.01.01", }, ], }, { defaultStatus: "unknown", product: "IE/AS-i Link PN IO", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "IE/PB-Link (incl. SIPLUS NET variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.0", }, ], }, { defaultStatus: "unknown", product: "SCALANCE M-800 family (incl. S615, MUM-800 and RM1224)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.03", }, ], }, { defaultStatus: "unknown", product: "SCALANCE W-700 IEEE 802.11n family", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V6.1", }, ], }, { defaultStatus: "unknown", product: "SCALANCE X-200 family (incl. SIPLUS NET variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V5.2.2", }, ], }, { defaultStatus: "unknown", product: "SCALANCE X-200IRT family (incl. SIPLUS NET variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V5.4.0", }, ], }, { defaultStatus: "unknown", product: "SCALANCE X-300 family (incl. X408 and SIPLUS NET variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.1.0", }, ], }, { defaultStatus: "unknown", product: "SCALANCE X408 family", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.1.0", }, ], }, { defaultStatus: "unknown", product: "SCALANCE X414", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.10.2", }, ], }, { defaultStatus: "unknown", product: "SCALANCE XM-400 family", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V6.1", }, ], }, { defaultStatus: "unknown", product: "SCALANCE XR-500 family", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V6.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CM 1542-1", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CM 1542SP-1", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.0.15", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1.82", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1243-1 (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1.82", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1243-7 LTE US", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1.82", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1243-8 IRC", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1.82", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1243-8 IRC", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1.82", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.0.15", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1543-1 (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1543SP-1 (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.0.15", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1604", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.7", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1616", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.7", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1626", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 343-1 (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.1.3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 343-1 Advanced (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 343-1 Lean (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.1.3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 443-1 (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 443-1 Advanced (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 443-1 OPC UA", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC DK-16xx PN IO", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.7", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200AL IM 157-1 PN", vendor: "Siemens", versions: [ { lessThan: "V1.0.2", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200M (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200MP IM 155-5 PN BA", vendor: "Siemens", versions: [ { lessThan: "V4.0.1", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200MP IM 155-5 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200MP IM 155-5 PN ST", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM 154-3 PN HF", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM 154-4 PN HF", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN BA", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN HS", vendor: "Siemens", versions: [ { lessThan: "V4.0.1", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN ST", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN ST BA", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 4AO U/I 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN: IO-Link Master", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200S (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V15.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC MV420 SR-B", vendor: "Siemens", versions: [ { lessThan: "V7.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC MV420 SR-B Body", vendor: "Siemens", versions: [ { lessThan: "V7.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC MV420 SR-P", vendor: "Siemens", versions: [ { lessThan: "V7.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC MV420 SR-P Body", vendor: "Siemens", versions: [ { lessThan: "V7.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC MV440 HR", vendor: "Siemens", versions: [ { lessThan: "V7.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC MV440 SR", vendor: "Siemens", versions: [ { lessThan: "V7.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC MV440 UR", vendor: "Siemens", versions: [ { lessThan: "V7.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC RF650R", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC RF680R", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC RF685R", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-1200 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.2.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-1500 Software Controller", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-200 SMART", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "V3.X.14", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "V6.0.7", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "V6.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "V7.0.2", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-410 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V8.2", }, ], }, { defaultStatus: "unknown", product: "SIMATIC TDC CP51M1", vendor: "Siemens", versions: [ { lessThan: "V1.1.8", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC TDC CPU555", vendor: "Siemens", versions: [ { lessThan: "V1.1.1", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC Teleservice Adapter IE Advanced", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC Teleservice Adapter IE Basic", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC Teleservice Adapter IE Standard", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC WinAC RTX 2010", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2010 SP3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC WinAC RTX F 2010", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2010 SP3", }, ], }, { defaultStatus: "unknown", product: "SIMOCODE pro V PROFINET (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.0.0", }, ], }, { defaultStatus: "unknown", product: "SIMOTION", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.5 HF1", }, ], }, { defaultStatus: "unknown", product: "SIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.4 HF26", }, ], }, { defaultStatus: "unknown", product: "SINAMICS DCM w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.4 SP1 HF5", }, ], }, { defaultStatus: "unknown", product: "SINAMICS DCP w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.2 HF1", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G110M w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 SP6 HF3", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 SP6 HF3", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G130 V4.7 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF27", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G130 V4.8 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 HF4", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G150 V4.7 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "V4.7: All versions < V4.7 HF27", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G150 V4.8 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 HF4", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GH150 V4.7 w. PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 SP5 HF7", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GL150 V4.7 w. PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP2", }, ], }, { defaultStatus: "unknown", product: "SINAMICS GM150 V4.7 w. PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF31", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S110 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.4 SP3 HF5", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V4.7 SP1 w. PN (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V4.7 w. PN (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF27", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V4.8 w. PN (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 HF4", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S150 V4.7 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF27", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S150 V4.8 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 HF4", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SL150 V4.7.0 w. PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF30", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SL150 V4.7.4 w. PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP2", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SL150 V4.7.5 w. PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP2", }, ], }, { defaultStatus: "unknown", product: "SINAMICS SM120 V4.7 w. PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 SP2", }, ], }, { defaultStatus: "unknown", product: "SINAMICS V90 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.01", }, ], }, { defaultStatus: "unknown", product: "SINUMERIK 828D V4.5 and prior", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.5 SP6 HF2", }, ], }, { defaultStatus: "unknown", product: "SINUMERIK 828D V4.7", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 SP4 HF1", }, ], }, { defaultStatus: "unknown", product: "SINUMERIK 840D sl V4.5 and prior", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.5 SP6 HF2", }, ], }, { defaultStatus: "unknown", product: "SINUMERIK 840D sl V4.7", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 SP4 HF1", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN ST", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN ST TX RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST BA", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST TX RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIRIUS ACT 3SU1 interface module PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.1.0", }, ], }, { defaultStatus: "unknown", product: "SIRIUS Motor Starter M200D PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIRIUS Soft Starter 3RW44 PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SITOP PSU8600 PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.2.0", }, ], }, { defaultStatus: "unknown", product: "SITOP UPS1600 PROFINET (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.2.0", }, ], }, { defaultStatus: "unknown", product: "Softnet PROFINET IO for PC-based Windows systems", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V14 SP1", }, ], }, ], descriptions: [ { lang: "en", value: "Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.", }, ], metrics: [ { cvssV3_1: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, }, { cvssV4_0: { baseScore: 7.1, baseSeverity: "HIGH", vectorString: "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", version: "4.0", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-400", description: "CWE-400: Uncontrolled Resource Consumption", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-09-10T09:33:18.492Z", orgId: "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", shortName: "siemens", }, references: [ { name: "1038463", tags: [ "vdb-entry", "x_refsource_SECTRACK", ], url: "http://www.securitytracker.com/id/1038463", }, { name: "98369", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/98369", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf", }, { tags: [ "x_refsource_MISC", ], url: "https://ics-cert.us-cert.gov/advisories/ICSA-18-023-02", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf", }, { tags: [ "x_refsource_MISC", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf", }, { url: "https://cert-portal.siemens.com/productcert/html/ssa-293562.html", }, { url: "https://cert-portal.siemens.com/productcert/html/ssa-284673.html", }, { url: "https://cert-portal.siemens.com/productcert/html/ssa-546832.html", }, ], }, }, cveMetadata: { assignerOrgId: "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", assignerShortName: "siemens", cveId: "CVE-2017-2680", datePublished: "2017-05-11T01:00:00", dateReserved: "2016-12-01T00:00:00", dateUpdated: "2024-09-10T09:33:18.492Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
CVE-2017-2681 (GCVE-0-2017-2681)
Vulnerability from cvelistv5
Published
2017-05-11 10:00
Modified
2024-09-10 09:33
Severity ?
6.5 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.1 (High) - CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
7.1 (High) - CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS score ?
Summary
Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.
References
▼ | URL | Tags |
---|---|---|
http://www.securitytracker.com/id/1038463 | vdb-entry, x_refsource_SECTRACK | |
http://www.securityfocus.com/bid/98369 | vdb-entry, x_refsource_BID | |
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf | x_refsource_CONFIRM | |
https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf | x_refsource_MISC | |
https://cert-portal.siemens.com/productcert/html/ssa-293562.html |
Impacted products
Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | Siemens | Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller |
Version: All versions < V4.1.1 Patch04 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
{ containers: { adp: [ { metrics: [ { other: { content: { id: "CVE-2017-2681", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-07-23T20:22:19.045364Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-07-23T20:22:26.181Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, { providerMetadata: { dateUpdated: "2024-08-05T14:02:07.386Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "1038463", tags: [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred", ], url: "http://www.securitytracker.com/id/1038463", }, { name: "98369", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/98369", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf", }, { tags: [ "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/html/ssa-293562.html", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unknown", product: "Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.1.1 Patch04", }, ], }, { defaultStatus: "unknown", product: "Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.2.1 Patch03", }, ], }, { defaultStatus: "unknown", product: "Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.4.0 Patch01", }, ], }, { defaultStatus: "unknown", product: "IE/AS-i Link PN IO", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "IE/PB-Link (incl. SIPLUS NET variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.0", }, ], }, { defaultStatus: "unknown", product: "SCALANCE M-800 family (incl. S615, MUM-800 and RM1224)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.03", }, ], }, { defaultStatus: "unknown", product: "SCALANCE W-700 IEEE 802.11n family", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V6.1", }, ], }, { defaultStatus: "unknown", product: "SCALANCE X-200 family (incl. SIPLUS NET variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V5.2.2", }, ], }, { defaultStatus: "unknown", product: "SCALANCE X-200IRT family (incl. SIPLUS NET variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V5.4.0", }, ], }, { defaultStatus: "unknown", product: "SCALANCE X-300 family (incl. X408 and SIPLUS NET variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.1.0", }, ], }, { defaultStatus: "unknown", product: "SCALANCE X408 family", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.1.0", }, ], }, { defaultStatus: "unknown", product: "SCALANCE X414", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.10.2", }, ], }, { defaultStatus: "unknown", product: "SCALANCE XM-400 family", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V6.1", }, ], }, { defaultStatus: "unknown", product: "SCALANCE XR-500 family", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V6.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CM 1542-1", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CM 1542SP-1", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.0.15", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1243-1 (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1.82", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1243-8 IRC", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1.82", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.0.15", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1543-1 (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1543SP-1 (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.0.15", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1604", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.7", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 1616", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.7", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 343-1 (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.1.3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 343-1 Advanced (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 343-1 Lean (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.1.3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 443-1 (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 443-1 Advanced (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.2.17", }, ], }, { defaultStatus: "unknown", product: "SIMATIC CP 443-1 OPC UA", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC DK-16xx PN IO", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.7", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200AL IM 157-1 PN", vendor: "Siemens", versions: [ { lessThan: "V1.0.2", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200M (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200MP IM 155-5 PN BA", vendor: "Siemens", versions: [ { lessThan: "V4.0.1", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200MP IM 155-5 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200MP IM 155-5 PN ST", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM 154-3 PN HF", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200pro IM 154-4 PN HF", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN BA", vendor: "Siemens", versions: [ { lessThan: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN HS", vendor: "Siemens", versions: [ { lessThan: "V4.0.1", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN ST", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET 200SP IM 155-6 PN ST BA", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 4AO U/I 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200ecoPN: IO-Link Master", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC ET200S (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V15.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC MV420 SR-B", vendor: "Siemens", versions: [ { lessThan: "V7.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC MV420 SR-B Body", vendor: "Siemens", versions: [ { lessThan: "V7.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC MV420 SR-P", vendor: "Siemens", versions: [ { lessThan: "V7.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC MV420 SR-P Body", vendor: "Siemens", versions: [ { lessThan: "V7.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC MV440 HR", vendor: "Siemens", versions: [ { lessThan: "V7.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC MV440 SR", vendor: "Siemens", versions: [ { lessThan: "V7.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC MV440 UR", vendor: "Siemens", versions: [ { lessThan: "V7.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC RF650R", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC RF680R", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC RF685R", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V3.0", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-1200 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.2.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-1500 Software Controller", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.1", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-200 SMART", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "V3.X.14", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "V6.0.7", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "V6.0.6", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { lessThan: "V7.0.2", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC S7-410 CPU family (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V8.2", }, ], }, { defaultStatus: "unknown", product: "SIMATIC TDC CP51M1", vendor: "Siemens", versions: [ { lessThan: "V1.1.8", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC TDC CPU555", vendor: "Siemens", versions: [ { lessThan: "V1.1.1", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIMATIC Teleservice Adapter IE Advanced", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC Teleservice Adapter IE Basic", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC Teleservice Adapter IE Standard", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIMATIC WinAC RTX 2010", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2010 SP3", }, ], }, { defaultStatus: "unknown", product: "SIMATIC WinAC RTX F 2010", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2010 SP3", }, ], }, { defaultStatus: "unknown", product: "SIMOCODE pro V PROFINET (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.0.0", }, ], }, { defaultStatus: "unknown", product: "SIMOTION", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.5 HF1", }, ], }, { defaultStatus: "unknown", product: "SINAMICS DCM w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.4 SP1 HF5", }, ], }, { defaultStatus: "unknown", product: "SINAMICS DCP w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.2 HF1", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G110M w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 SP6 HF3", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 SP6 HF3", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G130 V4.7 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF27", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G130 V4.8 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 HF4", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G150 V4.7 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "V4.7: All versions < V4.7 HF27", }, ], }, { defaultStatus: "unknown", product: "SINAMICS G150 V4.8 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 HF4", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S110 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.4 SP3 HF5", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V4.7 SP1 w. PN (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V4.7 w. PN (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF27", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S120 V4.8 w. PN (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 HF4", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S150 V4.7 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 HF27", }, ], }, { defaultStatus: "unknown", product: "SINAMICS S150 V4.8 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.8 HF4", }, ], }, { defaultStatus: "unknown", product: "SINAMICS V90 w. PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.01", }, ], }, { defaultStatus: "unknown", product: "SINUMERIK 828D V4.5 and prior", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.5 SP6 HF2", }, ], }, { defaultStatus: "unknown", product: "SINUMERIK 828D V4.7", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 SP4 HF1", }, ], }, { defaultStatus: "unknown", product: "SINUMERIK 840D sl V4.5 and prior", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.5 SP6 HF2", }, ], }, { defaultStatus: "unknown", product: "SINUMERIK 840D sl V4.7", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V4.7 SP4 HF1", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN ST", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200MP IM 155-5 PN ST TX RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.2.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST BA", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIPLUS ET 200SP IM 155-6 PN ST TX RAIL", vendor: "Siemens", versions: [ { lessThan: "V4.1.0", status: "affected", version: "0", versionType: "custom", }, ], }, { defaultStatus: "unknown", product: "SIRIUS ACT 3SU1 interface module PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.1.0", }, ], }, { defaultStatus: "unknown", product: "SIRIUS Motor Starter M200D PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SIRIUS Soft Starter 3RW44 PN", vendor: "Siemens", versions: [ { status: "affected", version: "All versions", }, ], }, { defaultStatus: "unknown", product: "SITOP PSU8600 PROFINET", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V1.2.0", }, ], }, { defaultStatus: "unknown", product: "SITOP UPS1600 PROFINET (incl. SIPLUS variants)", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V2.2.0", }, ], }, { defaultStatus: "unknown", product: "Softnet PROFINET IO for PC-based Windows systems", vendor: "Siemens", versions: [ { status: "affected", version: "All versions < V14 SP1", }, ], }, ], descriptions: [ { lang: "en", value: "Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.", }, ], metrics: [ { cvssV3_1: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, }, { cvssV4_0: { baseScore: 7.1, baseSeverity: "HIGH", vectorString: "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", version: "4.0", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-400", description: "CWE-400: Uncontrolled Resource Consumption", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-09-10T09:33:20.658Z", orgId: "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", shortName: "siemens", }, references: [ { name: "1038463", tags: [ "vdb-entry", "x_refsource_SECTRACK", ], url: "http://www.securitytracker.com/id/1038463", }, { name: "98369", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/98369", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf", }, { tags: [ "x_refsource_MISC", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf", }, { url: "https://cert-portal.siemens.com/productcert/html/ssa-293562.html", }, ], }, }, cveMetadata: { assignerOrgId: "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", assignerShortName: "siemens", cveId: "CVE-2017-2681", datePublished: "2017-05-11T10:00:00", dateReserved: "2016-12-01T00:00:00", dateUpdated: "2024-09-10T09:33:20.658Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
CVE-2013-6920 (GCVE-0-2013-6920)
Vulnerability from cvelistv5
Published
2013-12-07 00:00
Modified
2024-08-06 17:53
Severity ?
EPSS score ?
Summary
Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.
References
▼ | URL | Tags |
---|---|---|
http://ics-cert.us-cert.gov/advisories/ICSA-13-338-01 | x_refsource_MISC | |
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-742938.pdf | x_refsource_CONFIRM | |
https://cert-portal.siemens.com/productcert/pdf/ssa-742938.pdf | x_refsource_CONFIRM |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-06T17:53:45.861Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://ics-cert.us-cert.gov/advisories/ICSA-13-338-01", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-742938.pdf", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-742938.pdf", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2013-12-04T00:00:00", descriptions: [ { lang: "en", value: "Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2020-02-10T14:06:15", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { tags: [ "x_refsource_MISC", ], url: "http://ics-cert.us-cert.gov/advisories/ICSA-13-338-01", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-742938.pdf", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-742938.pdf", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2013-6920", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "http://ics-cert.us-cert.gov/advisories/ICSA-13-338-01", refsource: "MISC", url: "http://ics-cert.us-cert.gov/advisories/ICSA-13-338-01", }, { name: "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-742938.pdf", refsource: "CONFIRM", url: "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-742938.pdf", }, { name: "https://cert-portal.siemens.com/productcert/pdf/ssa-742938.pdf", refsource: "CONFIRM", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-742938.pdf", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2013-6920", datePublished: "2013-12-07T00:00:00", dateReserved: "2013-12-02T00:00:00", dateUpdated: "2024-08-06T17:53:45.861Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
Vulnerability from fkie_nvd
Published
2017-12-26 04:29
Modified
2024-11-21 03:10
Severity ?
Summary
Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.
References
▼ | URL | Tags | |
---|---|---|---|
productcert@siemens.com | https://cert-portal.siemens.com/productcert/html/ssa-141614.html | ||
productcert@siemens.com | https://cert-portal.siemens.com/productcert/html/ssa-346262.html | ||
productcert@siemens.com | https://cert-portal.siemens.com/productcert/html/ssa-546832.html | ||
productcert@siemens.com | https://cert-portal.siemens.com/productcert/pdf/ssa-141614.pdf | ||
productcert@siemens.com | https://cert-portal.siemens.com/productcert/pdf/ssa-346262.pdf | ||
productcert@siemens.com | https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf | ||
productcert@siemens.com | https://www.securityfocus.com/bid/101964 | ||
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/html/ssa-141614.html | ||
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/html/ssa-346262.html | ||
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/html/ssa-546832.html | ||
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-141614.pdf | ||
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-346262.pdf | ||
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf | ||
af854a3a-2127-422b-91ae-364da2661108 | https://www.securityfocus.com/bid/101964 |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
siemens | simatic_s7-200_firmware | * | |
siemens | simatic_s7-200 | - | |
siemens | simatic_s7-400pn_v6_firmware | * | |
siemens | simatic_s7-400pn_v6 | - | |
siemens | simatic_s7-400h_v6_firmware | * | |
siemens | simatic_s7-400h_v6 | - | |
siemens | simatic_s7-400pn\/dp_v7_firmware | - | |
siemens | simatic_s7-400pn\/dp_v7 | - | |
siemens | simatic_s7-410_v8_firmware | - | |
siemens | simatic_s7-410_v8 | - | |
siemens | simatic_s7-300_firmware | - | |
siemens | simatic_s7-300 | - | |
siemens | simatic_s7-1200_firmware | - | |
siemens | simatic_s7-1200 | - | |
siemens | simatic_s7-1500_firmware | * | |
siemens | simatic_s7-1500 | - | |
siemens | simatic_s7-1500_controller_firmware | 2.0 | |
siemens | simatic_s7-1500_controller | - | |
siemens | simatic_winac_rtx_f_2010_firmware | - | |
siemens | simatic_winac_rtx_f_2010 | - | |
siemens | simatic_et_200al_firmware | - | |
siemens | simatic_et_200al | - | |
siemens | simatic_et_200ecopn_firmware | - | |
siemens | simatic_et_200ecopn | - | |
siemens | simatic_et_200m_firmware | - | |
siemens | simatic_et_200m | - | |
siemens | simatic_et_200mp_firmware | - | |
siemens | simatic_et_200mp | - | |
siemens | simatic_et_200pro_firmware | - | |
siemens | simatic_et_200pro | - | |
siemens | simatic_et_200s_firmware | - | |
siemens | simatic_et_200s | - | |
siemens | simatic_et_200sp_firmware | - | |
siemens | simatic_et_200sp | - | |
siemens | dk_standard_ethernet_controller_firmware | - | |
siemens | dk_standard_ethernet_controller | - | |
siemens | ek-ertec_200p_firmware | * | |
siemens | ek-ertec_200p | - | |
siemens | ek-ertec_200pn_io_firmware | - | |
siemens | ek-ertec_200pn_io | - | |
siemens | simotion_d_firmware | * | |
siemens | simotion_d | - | |
siemens | simotion_c_firmware | * | |
siemens | simotion_c | - | |
siemens | simotion_p_firmware | * | |
siemens | simotion_p | - | |
siemens | sinamics_dcm_firmware | - | |
siemens | sinamics_dcm | - | |
siemens | sinamics_dcp_firmware | - | |
siemens | sinamics_dcp | - | |
siemens | sinamics_g110m\/g120pn_firmware | * | |
siemens | sinamics_g110m\/g120pn | - | |
siemens | sinamics_g130_firmware | - | |
siemens | sinamics_g130 | - | |
siemens | sinamics_g150_firmware | - | |
siemens | sinamics_g150 | - | |
siemens | sinamics_s110pn_firmware | - | |
siemens | sinamics_s110pn | - | |
siemens | sinamics_s120_firmware | - | |
siemens | sinamics_s120 | - | |
siemens | sinamics_s150_v4.7_firmware | - | |
siemens | sinamics_s150_v4.7 | - | |
siemens | sinamics_s150_v4.8_firmware | - | |
siemens | sinamics_s150_v4.8 | - | |
siemens | sinamics_v90pn_firmware | - | |
siemens | sinamics_v90pn | - | |
siemens | sinumerik_840d_sl_firmware | - | |
siemens | sinumerik_840d_sl | - | |
siemens | simatic_compact_field_unit_firmware | - | |
siemens | simatic_compact_field_unit | - | |
siemens | simatic_pn\/pn_coupler_firmware | - | |
siemens | simatic_pn\/pn_coupler | - | |
siemens | simocode_pro_v_profinet_firmware | - | |
siemens | simocode_pro_v_profinet | - | |
siemens | sirius_soft_starter_3rw44pn_firmware | - | |
siemens | sirius_soft_starter_3rw44pn | - |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-200_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "9E1170E1-3978-4B26-AE20-0B2E8F4C379B", versionEndExcluding: "2.03.01", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-200:-:*:*:*:*:*:*:*", matchCriteriaId: "BAD1D073-B29D-42CE-AF5E-B1AEF3DF09E0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-400pn_v6_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E9296EA6-7EB3-4661-9024-C5E435E5E5DF", versionEndExcluding: "6.0.6", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-400pn_v6:-:*:*:*:*:*:*:*", matchCriteriaId: "FA55DDD2-92C5-4A73-A75D-F13A7B720A22", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-400h_v6_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A0DF482D-78BF-418E-8299-45E7C11C0F64", versionEndExcluding: "6.0.8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-400h_v6:-:*:*:*:*:*:*:*", matchCriteriaId: "1D082EB6-3C13-40C1-9949-179DC59037C1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-400pn\\/dp_v7_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "D29A41A6-33ED-4E2E-9613-13FF0A521C1A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-400pn\\/dp_v7:-:*:*:*:*:*:*:*", matchCriteriaId: "66E6070F-9180-4FBC-A0DB-6AC8C242CADA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-410_v8_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "7F211D16-8C72-4720-BD72-8273DB73BBA1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-410_v8:-:*:*:*:*:*:*:*", matchCriteriaId: "926D9DCF-A7EA-416A-9A07-122D1FCA027B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "4C096137-C1E3-4D19-87A9-BEB7A081DD1E", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300:-:*:*:*:*:*:*:*", matchCriteriaId: "7EFD4E99-5C66-443F-8B6F-FA01C895DE78", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1200_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "5187EF42-3E86-4C73-A435-E5D5710B6999", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1200:-:*:*:*:*:*:*:*", matchCriteriaId: "EC545350-FD53-4B2E-886F-E20F12260C9B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "32221F56-8BA2-4DAE-BBCB-B5EDC2813674", versionEndExcluding: "2.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*", matchCriteriaId: "30DDEA9B-E1BF-4572-8E12-D13C54603E77", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1500_controller_firmware:2.0:*:*:*:*:*:*:*", matchCriteriaId: "9C92AE0F-3688-4DE7-8805-8C2B7E57A97A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1500_controller:-:*:*:*:*:*:*:*", matchCriteriaId: "5E324C78-6911-412E-87D4-36A5BCA856EC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_winac_rtx_f_2010_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "2EA451CA-78D2-46D8-A3BA-419ACCB2E9D9", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_winac_rtx_f_2010:-:*:*:*:*:*:*:*", matchCriteriaId: "61527333-0741-42DE-9A68-BBC288526DD8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200al_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "2AD5A211-517E-40BE-B306-FE29F9CD3F67", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200al:-:*:*:*:*:*:*:*", matchCriteriaId: "34C17B00-34B5-4A15-9333-252BE2975F37", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200ecopn_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "D281D261-AF1E-417B-9D86-2BC11B5D1231", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200ecopn:-:*:*:*:*:*:*:*", matchCriteriaId: "0259EAE9-0CA0-49A5-A573-8339604A181B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200m_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "D0BED0F6-86D0-43E0-AD49-F4F111245F39", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200m:-:*:*:*:*:*:*:*", matchCriteriaId: "7037E46B-4FE5-4693-B6A6-B5AF7B652C4F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200mp_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "DDF6E7E6-B323-4576-92AF-33FF3E5F3CE8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200mp:-:*:*:*:*:*:*:*", matchCriteriaId: "49DA8715-D671-4D8F-A870-E61960A5AFA4", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200pro_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "1BAFDDB1-7AF3-4665-B1AE-ED893245890A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200pro:-:*:*:*:*:*:*:*", matchCriteriaId: "3F0CE2EC-9A73-4576-A389-A19893D47B0F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200s_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "1C194763-8D3D-490D-BF6C-B881581BB13B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200s:-:*:*:*:*:*:*:*", matchCriteriaId: "A1EC40E7-F004-446C-B5C9-0AB9911105E0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200sp_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "238BF3F4-3680-4138-A1F0-4034A614A41B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200sp:-:*:*:*:*:*:*:*", matchCriteriaId: "691CA334-4394-4ED6-B417-F67FC92228AE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "ED030D86-261F-446C-A7AA-1B2CD3C0BF09", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:dk_standard_ethernet_controller:-:*:*:*:*:*:*:*", matchCriteriaId: "53DF35F1-94FF-4D0B-9FA2-E8B0AFAEA5FF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:ek-ertec_200p_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D4EE8C83-8D16-447C-AF7C-4CF52438E932", versionEndExcluding: "4.5", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:ek-ertec_200p:-:*:*:*:*:*:*:*", matchCriteriaId: "FB75CD44-5223-40A7-A835-111BF3C25D23", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:ek-ertec_200pn_io_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "37947E71-645B-408D-B45B-A03214B46CEC", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:ek-ertec_200pn_io:-:*:*:*:*:*:*:*", matchCriteriaId: "36AA2F7C-ABCF-4F43-A595-49F8BDAD6336", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simotion_d_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5532645E-7937-4B07-8DE1-5CA04A57A852", versionEndIncluding: "5.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simotion_d:-:*:*:*:*:*:*:*", matchCriteriaId: "F736C6F1-98CE-4C94-9457-4E1278B66C05", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simotion_c_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E5DFA690-68F5-461E-BD0E-E9813F0103D3", versionEndIncluding: "5.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simotion_c:-:*:*:*:*:*:*:*", matchCriteriaId: "BA8EBFB0-47DE-495A-9971-B762BB519E0C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simotion_p_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A71DD5C2-3127-48CC-A02E-3BD6C66DB8B3", versionEndIncluding: "5.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simotion_p:-:*:*:*:*:*:*:*", matchCriteriaId: "AA14B83E-1438-46B9-B05E-DB9165DF9274", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_dcm_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "4004A6FB-C40C-484F-A0A2-485B6B617FF8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_dcm:-:*:*:*:*:*:*:*", matchCriteriaId: "A1A43D34-ECA3-4330-B85F-02BDD1D22149", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_dcp_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "713658D1-059F-478F-A950-3969EDD2EC6F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:*", matchCriteriaId: "B75F50CA-7371-4BC7-8D8A-13F8BC69E4EB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g110m\\/g120pn_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "22FF232D-AA38-481F-BA05-94BCD80A0E72", versionEndIncluding: "4.7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g110m\\/g120pn:-:*:*:*:*:*:*:*", matchCriteriaId: "DAD9F256-8342-45D2-9758-C24484CBE19D", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g130_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "2D52C517-17D7-467A-A021-9832DC8906F7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:*", matchCriteriaId: "373DBE44-AC28-4D04-93BB-35CD8C60E899", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g150_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "BF9EA116-C2EF-487F-A9CD-8526B014AA77", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:*", matchCriteriaId: "2296CA65-0E89-4BCB-8003-E7212BF1F585", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s110pn_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "BFA2F893-58D9-4445-9653-564291014A54", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s110pn:-:*:*:*:*:*:*:*", matchCriteriaId: "763325DC-F62B-4F61-8A05-CA5C836EC990", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s120_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "CDA8B933-D7E3-4E3B-AA1D-75AFC89EA730", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*", matchCriteriaId: "E5A824BD-935F-4E53-8313-C5544B0489C7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s150_v4.7_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "F961DB8C-4602-4B25-8CBC-F61413F48C40", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s150_v4.7:-:*:*:*:*:*:*:*", matchCriteriaId: "E0D975BB-137E-415B-9D0A-C3B68C3FD16A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s150_v4.8_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "63DC04F5-D4C9-4FD7-BA26-ACD9B6B6E91B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s150_v4.8:-:*:*:*:*:*:*:*", matchCriteriaId: "90FA0B11-B161-4516-9D4F-9D3CEABB71BA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_v90pn_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "66B06805-BAAA-46A8-9FCD-03876ED5D079", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_v90pn:-:*:*:*:*:*:*:*", matchCriteriaId: "0CB3D335-F7F5-4CEA-82E0-FF56762E984C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "705AA5C8-E884-479D-972E-C779B6D0542B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinumerik_840d_sl:-:*:*:*:*:*:*:*", matchCriteriaId: "765286DF-07EC-4C7A-AB8C-09559CD977EA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_compact_field_unit_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "B18BCB76-61B2-4573-8EBF-EB61B597B7E4", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_compact_field_unit:-:*:*:*:*:*:*:*", matchCriteriaId: "933FF731-95FA-4A32-80DC-47CD806144D0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_pn\\/pn_coupler_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "6086ACE6-B396-4954-80E8-EDD167DF2021", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_pn\\/pn_coupler:-:*:*:*:*:*:*:*", matchCriteriaId: "49FB85F8-7D45-433E-805B-360725F2980C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simocode_pro_v_profinet_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "BD292574-20C0-432B-8BE7-3893077DC3FD", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simocode_pro_v_profinet:-:*:*:*:*:*:*:*", matchCriteriaId: "352651A0-F7CE-4689-8597-15F3764707A9", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sirius_soft_starter_3rw44pn_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "44C18078-18D3-445F-B67B-B21BE6B6A44B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sirius_soft_starter_3rw44pn:-:*:*:*:*:*:*:*", matchCriteriaId: "336625A5-CADB-4F33-B49F-ACA4D4B4EDEC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.", }, { lang: "es", value: "Se ha identificado una vulnerabilidad en Development/Evaluation Kits para PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits para PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits para PROFINET IO: EK-ERTEC 200P, SIMATIC Compact Field Unit, SIMATIC ET200AL, SIMATIC ET200M (incluidas las variantes SIPLUS), SIMATIC ET200MP IM155-5 PN BA (incluidas las variantes SIPLUS), SIMATIC ET200MP IM155-5 PN HF (incluidas las variantes SIPLUS), SIMATIC ET200MP IM155-5 PN ST (incluidas las variantes SIPLUS), SIMATIC ET200S (incluidas las variantes SIPLUS), SIMATIC ET200SP IM155-6 PN BA (incluidas las variantes SIPLUS), SIMATIC ET200SP IM155-6 PN HA (incluidas las variantes SIPLUS), SIMATIC ET200SP IM155-6 PN HF (incluidas las variantes SIPLUS), SIMATIC ET200SP IM155-6 PN HS (incluidas las variantes SIPLUS), SIMATIC ET200SP IM155-6 PN ST (incluidas las variantes SIPLUS), SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 4AO U/I 4xM12, SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12, SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12, SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN: IO-Link Master, SIMATIC ET200pro, SIMATIC PN/PN Coupler (incluidas las variantes SIPLUS NET), familia SIMATIC S7-1200 CPU (incluidas las variantes SIPLUS), familia SIMATIC S7-1500 CPU (incluyendo las variantes relacionadas ET200 CPUs y SIPLUS), SIMATIC S7-1500 Software Controller, SIMATIC S7-200 SMART, familia SIMATIC S7-300 CPU (incluyendo las variantes relacionadas ET200 CPUs y SIPLUS), SIMATIC S7-400 H V6 CPU familia y posteriores (incluidas las variantes SIPLUS), SIMATIC S7-400 PN/DP V6 CPU familia y posteriores (incluidas las variantes SIPLUS), familia SIMATIC S7-400 PN/DP V7 CPU (incluidas las variantes SIPLUS), familia SIMATIC S7-410 V8 CPU (incluidas las variantes SIPLUS), SIMATIC TDC CP51M1, SIMATIC TDC CPU555, SIMATIC WinAC RTX (F) 2010, SIMOCODE pro V EIP (incluidas las variantes SIPLUS), SIMOCODE pro V PN (incluidas las variantes SIPLUS), SIMOTION C, SIMOTION D (incluidas las variantes SIPLUS), SIMOTION D4xx V4.4 para SINAMICS SM150i-2 w. PROFINET (incluidas las variantes SIPLUS), SIMOTION P V4.4 and V4.5, SIMOTION P V5, SINAMICS DCM w. PN, SINAMICS DCP w. PN, SINAMICS G110M w. PN, SINAMICS G120(C/P/D) w. PN (incluidas las variantes SIPLUS), SINAMICS G130 V4.7 w. PN, SINAMICS G130 V4.8 w. PN, SINAMICS G150 V4.7 w. PN, SINAMICS G150 V4.8 w. PN, SINAMICS GH150 V4.7 w. PROFINET, SINAMICS GL150 V4.7 w. PROFINET, SINAMICS GM150 V4.7 w. PROFINET, SINAMICS S110 w. PN, SINAMICS S120 V4.7 SP1 w. PN (incluidas las variantes SIPLUS), SINAMICS S120 V4.7 w. PN (incluidas las variantes SIPLUS), SINAMICS S120 V4.8 w. PN (incluidas las variantes SIPLUS), SINAMICS S120 prior to V4.7 w. PN (incluidas las variantes SIPLUS), SINAMICS S150 V4.7 w. PN, SINAMICS S150 V4.8 w. PN, SINAMICS SL150 V4.7.0 w. PROFINET, SINAMICS SL150 V4.7.4 w. PROFINET, SINAMICS SL150 V4.7.5 w. PROFINET, SINAMICS SM120 V4.7 w. PROFINET, SINAMICS V90 w. PN, SINUMERIK 840D sl, SIRIUS Soft Starter 3RW44 PN. Los paquetes especialmente creados enviados al puerto 161/UDP podrían generar una condición de denegación de servicio. Los dispositivos afectados deben reiniciarse manualmente", }, ], id: "CVE-2017-12741", lastModified: "2024-11-21T03:10:07.963", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "HIGH", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "COMPLETE", baseScore: 7.8, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:C", version: "2.0", }, exploitabilityScore: 10, impactScore: 6.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], cvssMetricV30: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, exploitabilityScore: 3.9, impactScore: 3.6, source: "nvd@nist.gov", type: "Primary", }, ], cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 3.9, impactScore: 3.6, source: "productcert@siemens.com", type: "Secondary", }, ], cvssMetricV40: [ { cvssData: { Automatable: "NOT_DEFINED", Recovery: "NOT_DEFINED", Safety: "NOT_DEFINED", attackComplexity: "LOW", attackRequirements: "NONE", attackVector: "NETWORK", availabilityRequirement: "NOT_DEFINED", baseScore: 8.7, baseSeverity: "HIGH", confidentialityRequirement: "NOT_DEFINED", exploitMaturity: "NOT_DEFINED", integrityRequirement: "NOT_DEFINED", modifiedAttackComplexity: "NOT_DEFINED", modifiedAttackRequirements: "NOT_DEFINED", modifiedAttackVector: "NOT_DEFINED", modifiedPrivilegesRequired: "NOT_DEFINED", modifiedSubAvailabilityImpact: "NOT_DEFINED", modifiedSubConfidentialityImpact: "NOT_DEFINED", modifiedSubIntegrityImpact: "NOT_DEFINED", modifiedUserInteraction: "NOT_DEFINED", modifiedVulnAvailabilityImpact: "NOT_DEFINED", modifiedVulnConfidentialityImpact: "NOT_DEFINED", modifiedVulnIntegrityImpact: "NOT_DEFINED", privilegesRequired: "NONE", providerUrgency: "NOT_DEFINED", subAvailabilityImpact: "NONE", subConfidentialityImpact: "NONE", subIntegrityImpact: "NONE", userInteraction: "NONE", valueDensity: "NOT_DEFINED", vectorString: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", version: "4.0", vulnAvailabilityImpact: "HIGH", vulnConfidentialityImpact: "NONE", vulnIntegrityImpact: "NONE", vulnerabilityResponseEffort: "NOT_DEFINED", }, source: "productcert@siemens.com", type: "Secondary", }, ], }, published: "2017-12-26T04:29:13.707", references: [ { source: "productcert@siemens.com", url: "https://cert-portal.siemens.com/productcert/html/ssa-141614.html", }, { source: "productcert@siemens.com", url: "https://cert-portal.siemens.com/productcert/html/ssa-346262.html", }, { source: "productcert@siemens.com", url: "https://cert-portal.siemens.com/productcert/html/ssa-546832.html", }, { source: "productcert@siemens.com", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-141614.pdf", }, { source: "productcert@siemens.com", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-346262.pdf", }, { source: "productcert@siemens.com", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf", }, { source: "productcert@siemens.com", url: "https://www.securityfocus.com/bid/101964", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://cert-portal.siemens.com/productcert/html/ssa-141614.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://cert-portal.siemens.com/productcert/html/ssa-346262.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://cert-portal.siemens.com/productcert/html/ssa-546832.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-141614.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-346262.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://www.securityfocus.com/bid/101964", }, ], sourceIdentifier: "productcert@siemens.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-400", }, ], source: "productcert@siemens.com", type: "Primary", }, { description: [ { lang: "en", value: "NVD-CWE-noinfo", }, ], source: "nvd@nist.gov", type: "Secondary", }, ], }
Vulnerability from fkie_nvd
Published
2017-05-11 10:29
Modified
2024-11-21 03:23
Severity ?
6.5 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.5 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.5 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.
References
▼ | URL | Tags | |
---|---|---|---|
productcert@siemens.com | http://www.securityfocus.com/bid/98369 | Third Party Advisory, VDB Entry | |
productcert@siemens.com | http://www.securitytracker.com/id/1038463 | Third Party Advisory, VDB Entry | |
productcert@siemens.com | https://cert-portal.siemens.com/productcert/html/ssa-293562.html | ||
productcert@siemens.com | https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf | Vendor Advisory | |
productcert@siemens.com | https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf | Broken Link | |
af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/98369 | Third Party Advisory, VDB Entry | |
af854a3a-2127-422b-91ae-364da2661108 | http://www.securitytracker.com/id/1038463 | Third Party Advisory, VDB Entry | |
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/html/ssa-293562.html | ||
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf | Broken Link |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
siemens | simatic_cp_343-1_std_firmware | * | |
siemens | simatic_cp_343-1_std | - | |
siemens | simatic_cp_343-1_lean_firmware | * | |
siemens | simatic_cp_343-1_lean | - | |
siemens | simatic_cp_343-1_adv_firmware | * | |
siemens | simatic_cp_343-1_adv | - | |
siemens | simatic_cp_443-1_std_firmware | * | |
siemens | simatic_cp_443-1_std | - | |
siemens | simatic_cp_443-1_adv_firmware | * | |
siemens | simatic_cp_443-1_adv | - | |
siemens | simatic_cp_443-1_opc-ua_firmware | * | |
siemens | simatic_cp_443-1_opc-ua | - | |
siemens | simatic_cp_1243-1_firmware | * | |
siemens | simatic_cp_1243-1 | - | |
siemens | simatic_cm_1542-1_firmware | * | |
siemens | simatic_cm_1542-1 | - | |
siemens | simatic_cp_1543sp-1_firmware | * | |
siemens | simatic_cp_1542sp-1 | - | |
siemens | simatic_cp_1542sp-1_irc_firmware | * | |
siemens | simatic_cp_1542sp-1_irc | - | |
siemens | simatic_cp_1543sp-1_firmware | * | |
siemens | simatic_cp_1543sp-1 | - | |
siemens | simatic_cp_1543-1_firmware | * | |
siemens | simatic_cp_1543-1 | - | |
siemens | simatic_rf650r_firmware | * | |
siemens | simatic_rf650r | - | |
siemens | simatic_rf680r_firmware | * | |
siemens | simatic_rf680r | - | |
siemens | simatic_rf685r_firmware | * | |
siemens | simatic_rf685r | - | |
siemens | simatic_cp_1616_firmware | * | |
siemens | simatic_cp_1616 | - | |
siemens | simatic_cp_1604_firmware | * | |
siemens | simatic_cp_1604 | - | |
siemens | simatic_dk-16xx_pn_io_firmware | * | |
siemens | simatic_dk-16xx_pn_io | - | |
siemens | scalance_x200_firmware | * | |
siemens | scalance_x200 | - | |
siemens | scalance_x200_irt_firmware | * | |
siemens | scalance_x200_irt | - | |
siemens | scalance_x300_firmware | * | |
siemens | scalance_x300 | - | |
siemens | scalance_x408_firmware | * | |
siemens | scalance_x408 | - | |
siemens | scalance_x414_firmware | * | |
siemens | scalance_x414 | - | |
siemens | scalance_xm400_firmware | * | |
siemens | scalance_xm400 | - | |
siemens | scalance_xr500_firmware | * | |
siemens | scalance_xr500 | - | |
siemens | scalance_w700_firmware | * | |
siemens | scalance_w700 | - | |
siemens | scalance_m-800_firmware | * | |
siemens | scalance_m-800 | - | |
siemens | scalance_s615_firmware | * | |
siemens | scalance_s615 | - | |
siemens | softnet_profinet_io_firmware | * | |
siemens | softnet_profinet_io_firmware | 14 | |
siemens | softnet_profinet_io | - | |
siemens | ie\/pb-link_firmware | * | |
siemens | ie\/pb-link | - | |
siemens | ie\/as-i_link_pn_io_firmware | * | |
siemens | ie\/as-i_link_pn_io | - | |
siemens | simatic_teleservice_adapter_standard_modem_firmware | * | |
siemens | simatic_teleservice_adapter_standard_modem | - | |
siemens | simatic_teleservice_adapter_ie_basic_modem_firmware | * | |
siemens | simatic_teleservice_adapter_ie_basic_modem | - | |
siemens | simatic_teleservice_adapter_ie_advanced_modem_firmware | * | |
siemens | simatic_teleservice_adapter_ie_advanced_modem | - | |
siemens | sitop_psu8600_firmware | * | |
siemens | sitop_psu8600 | - | |
siemens | ups1600_profinet_firmware | * | |
siemens | ups1600_profinet | - | |
siemens | simatic_et_200al_firmware | * | |
siemens | simatic_et_200al | - | |
siemens | simatic_et_200ecopn_firmware | * | |
siemens | simatic_et_200ecopn | - | |
siemens | simatic_et_200m_firmware | * | |
siemens | simatic_et_200m | - | |
siemens | simatic_et_200mp_firmware | * | |
siemens | simatic_et_200mp | - | |
siemens | simatic_et_200pro_firmware | * | |
siemens | simatic_et_200pro | - | |
siemens | simatic_et_200s_firmware | * | |
siemens | simatic_et_200s | - | |
siemens | simatic_et_200sp_firmware | * | |
siemens | simatic_et_200sp | - | |
siemens | pn\/pn_coupler_firmware | * | |
siemens | pn\/pn_coupler | - | |
siemens | dk_standard_ethernet_controller_firmware | * | |
siemens | dk_standard_ethernet_controller_firmware | 4.1.1 | |
siemens | dk_standard_ethernet_controller | - | |
siemens | ek-ertec_200p_pn_io_firmware | * | |
siemens | ek-ertec_200p_pn_io_firmware | 4.4.0 | |
siemens | ek-ertec_200p_pn_io | - | |
siemens | ek-ertec_200_pn_io_firmware | * | |
siemens | ek-ertec_200_pn_io_firmware | 4.2.1 | |
siemens | ek-ertec_200_pn_io | - | |
siemens | simatic_s7-200_smart_firmware | * | |
siemens | simatic_s7-200_smart | - | |
siemens | simatic_s7-300_firmware | * | |
siemens | simatic_s7-300 | - | |
siemens | simatic_s7-400_firmware | * | |
siemens | simatic_s7-400 | - | |
siemens | simatic_s7-1200_firmware | * | |
siemens | simatic_s7-1200 | - | |
siemens | simatic_s7-1500_firmware | * | |
siemens | simatic_s7-1500 | - | |
siemens | simatic_winac_rtx_firmware | * | |
siemens | simatic_winac_rtx_firmware | 2010 | |
siemens | simatic_winac_rtx | - | |
siemens | sirius_act_3su1_firmware | * | |
siemens | sirius_act_3su1 | - | |
siemens | sirius_soft_starter_3rw44_pn_firmware | * | |
siemens | sirius_soft_starter_3rw44_pn | - | |
siemens | sirius_motor_starter_m200d_profinet_firmware | * | |
siemens | sirius_motor_starter_m200d_profinet | - | |
siemens | simocode_pro_v_profinet_firmware | * | |
siemens | simocode_pro_v_profinet | - | |
siemens | sinamics_dcm_firmware | * | |
siemens | sinamics_dcm_firmware | 1.4 | |
siemens | sinamics_dcm | - | |
siemens | sinamics_dcp_firmware | * | |
siemens | sinamics_dcp_firmware | 1.2 | |
siemens | sinamics_dcp | - | |
siemens | sinamics_g110m_firmware | * | |
siemens | sinamics_g110m_firmware | 4.7 | |
siemens | sinamics_g110m | - | |
siemens | sinamics_g120\(c\/p\/d\)_pn_firmware | * | |
siemens | sinamics_g120\(c\/p\/d\)_pn | - | |
siemens | sinamics_g130_firmware | * | |
siemens | sinamics_g130_firmware | 4.7 | |
siemens | sinamics_g130 | - | |
siemens | sinamics_g150_firmware | * | |
siemens | sinamics_g150_firmware | 4.7 | |
siemens | sinamics_g150 | - | |
siemens | sinamics_s110_pn_firmware | * | |
siemens | sinamics_s110_pn_firmware | 4.4 | |
siemens | sinamics_s110_pn | - | |
siemens | sinamics_s120_firmware | * | |
siemens | sinamics_s120_firmware | 4.7 | |
siemens | sinamics_s120 | - | |
siemens | sinamics_s150_firmware | * | |
siemens | sinamics_s150_firmware | 4.7 | |
siemens | sinamics_s150 | - | |
siemens | sinamics_v90_pn_firmware | * | |
siemens | sinamics_v90_pn | - | |
siemens | simotion_firmware | * | |
siemens | simotion_firmware | 4.5 | |
siemens | simotion | - | |
siemens | sinumerik_828d_firmware | * | |
siemens | sinumerik_828d_firmware | 4.5 | |
siemens | sinumerik_828d | - | |
siemens | sinumerik_840d_sl_firmware | * | |
siemens | sinumerik_840d_sl_firmware | 4.5 | |
siemens | sinumerik_840d_sl | - | |
siemens | simatic_hmi_comfort_panels | * | |
siemens | simatic_hmi_comfort_panels | - | |
siemens | simatic_hmi_multi_panels | * | |
siemens | simatic_hmi_multi_panels | - | |
siemens | simatic_hmi_mobile_panels | * | |
siemens | simatic_hmi_mobile_panels | - | |
siemens | simatic_cp_1243-1_irc_firmware | * | |
siemens | simatic_cp_1243-1_irc | - | |
siemens | simatic_cp_1243-1_iec_firmware | * | |
siemens | simatic_cp_1243-1_iec | - | |
siemens | simatic_cp_1243-1_dnp3_firmware | * | |
siemens | simatic_cp_1243-1_dnp3 | - | |
siemens | simatic_cm_1542sp-1_firmware | * | |
siemens | simatic_cm_1542sp-1 | - | |
siemens | simatic_s7-1500_software_controller | * | |
siemens | sinumerik_828d_firmware | * | |
siemens | sinumerik_828d_firmware | 4.7 | |
siemens | sinumerik_828d | - | |
siemens | sinumerik_840d_sl_firmware | * | |
siemens | sinumerik_840d_sl_firmware | 4.7 | |
siemens | sinumerik_840d_sl | - | |
siemens | simatic_tdc_cpu555_firmware | * | |
siemens | simatic_tdc_cpu555 | - | |
siemens | simatic_tdc_cp51m1_firmware | * | |
siemens | simatic_tdc_cp51m1 | - |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_343-1_std_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "CFF143FA-311E-4081-805F-BBDB72003556", versionEndExcluding: "3.1.3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_343-1_std:-:*:*:*:*:*:*:*", matchCriteriaId: "9C351559-6D8D-4EA8-87D6-83003844BD97", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_343-1_lean_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "47A5C59B-DAB3-4B05-B9FA-B75685F4AE2A", versionEndExcluding: "3.1.3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_343-1_lean:-:*:*:*:*:*:*:*", matchCriteriaId: "EE2A18E2-F88F-4DC1-81E9-AC836C85A248", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_343-1_adv_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7E0622A2-C918-4062-938A-8736469F8286", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_343-1_adv:-:*:*:*:*:*:*:*", matchCriteriaId: "438184C5-3A2C-4DEE-8FF2-0EFBAA1BA37A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_443-1_std_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BB8BECDB-D55A-4B74-ADEC-CDDBAC4E3481", versionEndExcluding: "3.2.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_443-1_std:-:*:*:*:*:*:*:*", matchCriteriaId: "BB8C873A-25EB-4787-9F25-DC5852337093", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_443-1_adv_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "58E4035F-02AB-4B6D-A9AF-556DBE021C30", versionEndExcluding: "3.2.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_443-1_adv:-:*:*:*:*:*:*:*", matchCriteriaId: "75013961-5B00-42E9-9061-CF2E9A4FC090", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_443-1_opc-ua_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "32DC8BB2-9BC6-4CC2-9CF0-28DF8AEC595A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_443-1_opc-ua:-:*:*:*:*:*:*:*", matchCriteriaId: "977E97C8-959F-4146-8BFD-0FCF014B1534", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "EBE1A019-4BC4-4352-BA16-05629A20F89F", versionEndExcluding: "2.1.82", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:*", matchCriteriaId: "CA9BB25C-D5E3-43DE-8C73-06BDC43CA960", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cm_1542-1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6BE0A3E5-0069-4AD5-B287-88BE5D0291F1", versionEndExcluding: "2.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cm_1542-1:-:*:*:*:*:*:*:*", matchCriteriaId: "FCB3A00F-252F-4E41-8254-6E8BBD40C4FD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "CA3E3782-7F36-4BC3-8D00-E1961E3105E3", versionEndExcluding: "1.0.15", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:*", matchCriteriaId: "0C868560-8BAE-462D-AED0-3C52EA9B6DB8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A6AF0B55-84D1-46FA-B3A1-81EB2E2FED18", versionEndExcluding: "1.0.15", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:*", matchCriteriaId: "E362CEA5-F47B-4294-8F2D-A0A7AC6FF390", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "496E9B17-BD29-4DE9-96B3-B23E3599C766", versionEndExcluding: "2.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:*", matchCriteriaId: "843A8686-5172-4782-BB97-B5D3C6FB27A3", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1543-1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "12F7A42E-4D63-4A2A-ABF6-CA08BB6C6234", versionEndExcluding: "1.0.15", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1543-1:-:*:*:*:*:*:*:*", matchCriteriaId: "3FDE92FB-38C7-46E8-9208-BBD7872219D5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_rf650r_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "37B4E3A9-FE27-4A31-A213-92B461A5C846", versionEndExcluding: "3.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_rf650r:-:*:*:*:*:*:*:*", matchCriteriaId: "C82C2C69-D983-4317-968B-D1855DF8AE43", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_rf680r_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "177A6E55-8D64-4CB8-B366-AE272E715932", versionEndExcluding: "3.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_rf680r:-:*:*:*:*:*:*:*", matchCriteriaId: "450DE127-DFED-4799-B8EA-0F95028E4BC3", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_rf685r_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "72D14DB5-6132-4442-8AB2-3ECE89B1D47C", versionEndExcluding: "3.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_rf685r:-:*:*:*:*:*:*:*", matchCriteriaId: "63F70060-0090-4BD7-8BF6-769989879ACD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1616_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4FDC53A8-3F99-481E-9B0A-F5AF296B5BD6", versionEndExcluding: "2.7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1616:-:*:*:*:*:*:*:*", matchCriteriaId: "CA074FBE-1C3E-4441-8C51-52B555B85D9F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1604_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0424AECD-68D5-45F1-9F55-B72CB4DFE39C", versionEndExcluding: "2.7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1604:-:*:*:*:*:*:*:*", matchCriteriaId: "6304FA24-F194-4EE2-95F5-35D086F82C01", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_dk-16xx_pn_io_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "26113F2F-8C5E-471B-9E12-AA3B3860B5CF", versionEndExcluding: "2.7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_dk-16xx_pn_io:-:*:*:*:*:*:*:*", matchCriteriaId: "CA0D867D-737F-4CEC-BAEA-9ADE0BA2303E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_x200_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "45008AE8-8386-4CBA-8C38-10C1A60150C2", versionEndExcluding: "5.2.2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_x200:-:*:*:*:*:*:*:*", matchCriteriaId: "A59C91EA-5D1B-4970-8C36-BD76BA420B12", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_x200_irt_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7F61995A-2018-4DAA-9529-BADC145B267F", versionEndExcluding: "5.4.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_x200_irt:-:*:*:*:*:*:*:*", matchCriteriaId: "CAF3DA7A-6B80-4F20-835F-BF071197D1B0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_x300_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "CC97A506-7E63-43A3-ACB0-DDAF3C5369C3", versionEndExcluding: "4.1.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_x300:-:*:*:*:*:*:*:*", matchCriteriaId: "E3F6299B-D7E3-4750-B016-7DCBC83C2287", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_x408_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B8A4CF89-9DDA-4974-A886-CC0A912017F7", versionEndExcluding: "4.1.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_x408:-:*:*:*:*:*:*:*", matchCriteriaId: "47F713E4-4B75-476E-BC21-92CA10198AE9", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_x414_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2CA7C987-779A-4B64-BFAC-73D54618AF04", versionEndExcluding: "3.10.2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_x414:-:*:*:*:*:*:*:*", matchCriteriaId: "7E4C1BEF-D6B4-4260-9AC5-6F903EF6F4B1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_xm400_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F6EB11E9-4036-4A93-91DC-4D987B5FE2BA", versionEndExcluding: "6.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_xm400:-:*:*:*:*:*:*:*", matchCriteriaId: "9FC408A8-903F-43A2-9D05-65AD4482FDBB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_xr500_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4B9AF696-211F-4CAD-8A0E-402487E8DC50", versionEndExcluding: "6.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_xr500:-:*:*:*:*:*:*:*", matchCriteriaId: "080E722F-FCD4-4967-86EE-151ADC5702E7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_w700_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D8763BB9-5DDA-4817-BDA6-63983CD4BC67", versionEndExcluding: "6.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_w700:-:*:*:*:*:*:*:*", matchCriteriaId: "D3033B1E-57A6-4AE3-A861-7047CF8EAD79", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B74BBB98-0146-467E-B77B-E2FA1ABF2ED5", versionEndExcluding: "4.03", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*", matchCriteriaId: "DFB9921A-5204-40A3-88AB-B7755F5C6875", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B2345F75-2CD1-4014-8F90-36A4FB4CC3BE", versionEndExcluding: "4.03", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*", matchCriteriaId: "E917CBBB-EF41-4113-B0CA-EB91889235E7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:softnet_profinet_io_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "9831567D-6528-4ACA-99F9-1EC42CB4A90D", versionEndExcluding: "14", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:softnet_profinet_io_firmware:14:-:*:*:*:*:*:*", matchCriteriaId: "27BC04E4-8C6F-4A66-86C4-A8F793A10BDD", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:softnet_profinet_io:-:*:*:*:*:*:*:*", matchCriteriaId: "E348069A-B809-4DF6-81E9-DC52C6E2C268", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:ie\\/pb-link_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8ED91175-0AF3-424A-8C49-43587BB95EAB", versionEndExcluding: "3.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:ie\\/pb-link:-:*:*:*:*:*:*:*", matchCriteriaId: "8D43C16C-0719-4648-903F-6CC0FFF1835A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:ie\\/as-i_link_pn_io_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7E909C1E-9329-4459-ACE3-AD906CD4A968", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:ie\\/as-i_link_pn_io:-:*:*:*:*:*:*:*", matchCriteriaId: "317863B6-0B71-4D03-83FE-FC59EBB5307C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_teleservice_adapter_standard_modem_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A9F37323-B072-470B-B770-9735B84CACFE", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_teleservice_adapter_standard_modem:-:*:*:*:*:*:*:*", matchCriteriaId: "610DF0CA-D0FA-4CBE-8383-6F038E7AC4C3", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_basic_modem_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4B366E4A-4223-4A42-9A05-52EB23BCF209", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_basic_modem:-:*:*:*:*:*:*:*", matchCriteriaId: "98FB86B6-DB8A-42EF-BA60-68D96B6FE8B6", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_advanced_modem_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7CD7CAEE-9C1A-4520-8F85-FD9BFB0A57D9", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_advanced_modem:-:*:*:*:*:*:*:*", matchCriteriaId: "BF513598-C3FA-4555-8133-A7276DDAFAC8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sitop_psu8600_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5468C9FA-ADD9-4FD3-89FE-C3621F5CB0EC", versionEndExcluding: "1.2.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sitop_psu8600:-:*:*:*:*:*:*:*", matchCriteriaId: "55058209-8AE5-42AF-80D4-5A7A44307266", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:ups1600_profinet_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "54B85DBA-24CA-4F95-89A5-D53D5AC69B0E", versionEndExcluding: "2.2.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:ups1600_profinet:-:*:*:*:*:*:*:*", matchCriteriaId: "ECC84D6F-F5E0-47CF-B11E-1C43F866D972", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200al_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0C9D0595-53CD-48C0-82E3-DB0B2EC17721", versionEndExcluding: "1.0.2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200al:-:*:*:*:*:*:*:*", matchCriteriaId: "34C17B00-34B5-4A15-9333-252BE2975F37", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200ecopn_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3EE0B998-E408-408F-8F78-5E90F74E9C9B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200ecopn:-:*:*:*:*:*:*:*", matchCriteriaId: "0259EAE9-0CA0-49A5-A573-8339604A181B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200m_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "14E56570-5C20-40BD-BF0B-F6ED06AFC8F7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200m:-:*:*:*:*:*:*:*", matchCriteriaId: "7037E46B-4FE5-4693-B6A6-B5AF7B652C4F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200mp_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "55BE63B0-F44E-4FCD-B00C-77595BACC62E", versionEndExcluding: "4.0.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200mp:-:*:*:*:*:*:*:*", matchCriteriaId: "49DA8715-D671-4D8F-A870-E61960A5AFA4", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200pro_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D054139B-BE36-4B34-88AE-BC487DCB1DCB", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200pro:-:*:*:*:*:*:*:*", matchCriteriaId: "3F0CE2EC-9A73-4576-A389-A19893D47B0F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200s_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BB063929-AAB0-4FF8-BCA3-71BA80517B1A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200s:-:*:*:*:*:*:*:*", matchCriteriaId: "A1EC40E7-F004-446C-B5C9-0AB9911105E0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200sp_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3237684A-3BEA-462F-A91D-ABC94C90D15A", versionEndExcluding: "4.2.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200sp:-:*:*:*:*:*:*:*", matchCriteriaId: "691CA334-4394-4ED6-B417-F67FC92228AE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:pn\\/pn_coupler_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "32BD232D-A6BB-4D7B-BD00-1085D08D8A77", versionEndExcluding: "4.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:pn\\/pn_coupler:-:*:*:*:*:*:*:*", matchCriteriaId: "CB2846BD-9DAB-44A2-87C9-39E3ACFE03FA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0FE40195-DE5A-4B9C-9455-FAF92FF090D0", versionEndExcluding: "4.1.1", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:-:*:*:*:*:*:*", matchCriteriaId: "9B339839-3D74-4E13-9EB6-24CA46F991A5", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:dk_standard_ethernet_controller:-:*:*:*:*:*:*:*", matchCriteriaId: "53DF35F1-94FF-4D0B-9FA2-E8B0AFAEA5FF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:ek-ertec_200p_pn_io_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E9329BF4-D00A-4138-AA4C-93022002C0B9", versionEndExcluding: "4.4.0", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:ek-ertec_200p_pn_io_firmware:4.4.0:-:*:*:*:*:*:*", matchCriteriaId: "7863DDDC-D5CE-44FE-89C4-0E8A702A91A8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:ek-ertec_200p_pn_io:-:*:*:*:*:*:*:*", matchCriteriaId: "E62802E3-AFA3-4023-9671-95C220397956", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:ek-ertec_200_pn_io_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8C46E084-9732-4920-86C2-3A91830CBCE3", versionEndExcluding: "4.2.1", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:ek-ertec_200_pn_io_firmware:4.2.1:-:*:*:*:*:*:*", matchCriteriaId: "18C8B2FB-87C3-4DBB-9960-53FA545F26CB", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:ek-ertec_200_pn_io:-:*:*:*:*:*:*:*", matchCriteriaId: "42D3FAF4-9B78-4EEF-8D80-17E9B98228D2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-200_smart_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "251EE4B2-F1C7-4ACF-B90D-4C0FE3D181E5", versionEndExcluding: "2.3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-200_smart:-:*:*:*:*:*:*:*", matchCriteriaId: "598EEFC9-5240-4011-9017-A9557585AA19", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "9461CADE-1624-4D1B-8CF2-CF65F75071C0", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300:-:*:*:*:*:*:*:*", matchCriteriaId: "7EFD4E99-5C66-443F-8B6F-FA01C895DE78", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-400_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2570E321-C28E-46FA-8693-1230B3B5FD1B", versionEndExcluding: "6.0.6", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-400:-:*:*:*:*:*:*:*", matchCriteriaId: "8F97B67B-4516-4AD9-B33C-7F480EE0DB4D", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1200_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "582B49BD-4565-4D19-BBE6-A193BDFCE8B0", versionEndExcluding: "4.2.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1200:-:*:*:*:*:*:*:*", matchCriteriaId: "EC545350-FD53-4B2E-886F-E20F12260C9B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "9D24953B-B3DF-4150-810C-64A94A55E829", versionEndExcluding: "2.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*", matchCriteriaId: "30DDEA9B-E1BF-4572-8E12-D13C54603E77", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_winac_rtx_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "80BDBB38-20D2-48C3-8B58-62C2D8CC00B8", versionEndExcluding: "2010", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:simatic_winac_rtx_firmware:2010:-:*:*:*:*:*:*", matchCriteriaId: "EA59D713-F342-4CDA-BDC8-108352D385DA", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_winac_rtx:-:*:*:*:*:*:*:*", matchCriteriaId: "CA5ADAB0-3985-4933-8CDD-D1546D8271CC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sirius_act_3su1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4E36412A-1AAB-42D1-B0B4-7A7BBF3CB317", versionEndExcluding: "1.1.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sirius_act_3su1:-:*:*:*:*:*:*:*", matchCriteriaId: "8582A3E8-C05E-4D0B-851D-8C3181ED61CC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sirius_soft_starter_3rw44_pn_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F84A65E6-4672-4B62-826E-6FAAE0B4A89D", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sirius_soft_starter_3rw44_pn:-:*:*:*:*:*:*:*", matchCriteriaId: "CBB058FA-3E70-4489-AAB1-0CB7EF16A2E7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sirius_motor_starter_m200d_profinet_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3D42184E-8998-4C40-9612-5C9DE193CC06", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sirius_motor_starter_m200d_profinet:-:*:*:*:*:*:*:*", matchCriteriaId: "BA5CB62E-04B7-4DD3-AA06-EB4A4FA58E54", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simocode_pro_v_profinet_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "98FDB53A-8F5D-46AA-9366-F6480B12D744", versionEndExcluding: "2.0.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simocode_pro_v_profinet:-:*:*:*:*:*:*:*", matchCriteriaId: "352651A0-F7CE-4689-8597-15F3764707A9", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_dcm_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FD2943F3-C46C-462E-9062-EE7B3E56CF72", versionEndExcluding: "1.4", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_dcm_firmware:1.4:-:*:*:*:*:*:*", matchCriteriaId: "975EFBBB-33E1-4D04-9E06-93553D45539C", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_dcm:-:*:*:*:*:*:*:*", matchCriteriaId: "A1A43D34-ECA3-4330-B85F-02BDD1D22149", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_dcp_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5D7A7140-62A2-434F-AB79-1D47C918F1FE", versionEndExcluding: "1.2", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_dcp_firmware:1.2:-:*:*:*:*:*:*", matchCriteriaId: "A2B61A79-C2B0-4C3D-A63C-B20FF78B2981", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:*", matchCriteriaId: "B75F50CA-7371-4BC7-8D8A-13F8BC69E4EB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g110m_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "775C90BB-C026-435C-889A-517EF85656C5", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_g110m_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "CAA92AC6-7DA0-418D-A13F-69268DFD7966", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g110m:-:*:*:*:*:*:*:*", matchCriteriaId: "D61D3E9C-1346-4354-BCD9-B02F67500C41", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g120\\(c\\/p\\/d\\)_pn_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "21ED7835-5D9B-4AF0-8E71-A4E7377FAD9F", versionEndExcluding: "4.7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g120\\(c\\/p\\/d\\)_pn:-:*:*:*:*:*:*:*", matchCriteriaId: "64E77B7F-3E48-4C2C-9E2E-4AAEA6BCA71A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g130_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4B3B0706-47CD-43FB-8E3A-7EEEF020AFBA", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_g130_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "1D36CF8D-6DA4-49ED-9EF1-F96292F671EE", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:*", matchCriteriaId: "373DBE44-AC28-4D04-93BB-35CD8C60E899", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "AC731378-CB83-4C15-BC6A-5A86DF9B62F1", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_g150_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "51A78A0B-5D75-418A-98AC-6EBF50D89A8A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:*", matchCriteriaId: "2296CA65-0E89-4BCB-8003-E7212BF1F585", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s110_pn_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "35B36BC1-EE75-48D5-B511-C79891DA0F86", versionEndExcluding: "4.4", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_s110_pn_firmware:4.4:-:*:*:*:*:*:*", matchCriteriaId: "8C21EF20-693C-425F-A370-E84722856212", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s110_pn:-:*:*:*:*:*:*:*", matchCriteriaId: "A4D7197E-C921-42CA-BE43-C96A4223F443", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s120_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "77A0BE57-1A9A-4564-9C53-CF47DEEF7991", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_s120_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "376556D0-1AE2-4F80-B3CE-C0251E35C326", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*", matchCriteriaId: "E5A824BD-935F-4E53-8313-C5544B0489C7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "772FF972-2193-4639-B454-F92762E49C39", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_s150_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "EE2B31F0-D45F-4B42-95D2-540C68C5F3DE", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:*", matchCriteriaId: "0D48682C-A39D-4A09-B904-50FA64A9D2A5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_v90_pn_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8EE54303-4FDA-42C7-B33B-BA884CD31339", versionEndExcluding: "1.01", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_v90_pn:-:*:*:*:*:*:*:*", matchCriteriaId: "D870F289-F2BC-4105-A8F0-30E47CDE9FEF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simotion_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "92A7198A-D6C5-4FBF-8860-5C8EA864718B", versionEndExcluding: "4.5", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:simotion_firmware:4.5:-:*:*:*:*:*:*", matchCriteriaId: "B5DA6BF7-ECB8-47F1-A791-E65CFF89A608", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simotion:-:*:*:*:*:*:*:*", matchCriteriaId: "879CF09E-4735-4A73-8E7B-215F2701F7E0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinumerik_828d_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "71CD07D8-ECED-47EF-B2BC-0585F9BB00C1", versionEndExcluding: "4.5", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinumerik_828d_firmware:4.5:-:*:*:*:*:*:*", matchCriteriaId: "AEB948AA-7BD7-4A0F-B86E-38ECD722C086", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinumerik_828d:-:*:*:*:*:*:*:*", matchCriteriaId: "7D97047C-9772-4AEB-B993-131EBBAE33BA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "28E3AB24-86B4-485D-8D3A-131E5C7F0108", versionEndExcluding: "4.5", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:4.5:-:*:*:*:*:*:*", matchCriteriaId: "40AC387B-B799-4A34-8C9E-73D05B86801D", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinumerik_840d_sl:-:*:*:*:*:*:*:*", matchCriteriaId: "765286DF-07EC-4C7A-AB8C-09559CD977EA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_comfort_panels:*:*:*:*:*:*:*:*", matchCriteriaId: "CE53BC8E-CDA7-476A-87CA-532F365C79A7", versionEndExcluding: "15.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_comfort_panels:-:*:*:*:*:*:*:*", matchCriteriaId: "3BCFE761-35C9-43EF-85BC-E8083B9F75CB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_multi_panels:*:*:*:*:*:*:*:*", matchCriteriaId: "A1150AED-CDBE-492C-95FF-3E02B3B447F1", versionEndExcluding: "15.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_multi_panels:-:*:*:*:*:*:*:*", matchCriteriaId: "1AAE6A83-737B-47A9-86BB-652C7F6A8013", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_mobile_panels:*:*:*:*:*:*:*:*", matchCriteriaId: "42E8D21B-9CF4-4C2E-B33C-212BA29C7124", versionEndExcluding: "15.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_mobile_panels:-:*:*:*:*:*:*:*", matchCriteriaId: "55E03180-BE77-4A22-A6C1-FE90B9760570", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1243-1_irc_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "02610368-4B97-4B3F-8592-64CF8F65D8AD", versionEndExcluding: "2.1.82", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1243-1_irc:-:*:*:*:*:*:*:*", matchCriteriaId: "61E7964A-E7A4-4CDE-B376-5BBEC5F00A73", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BE5003DA-5488-47C1-B442-9137E849FDD5", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:*", matchCriteriaId: "DFE96226-A2DF-4A9E-8CBB-8D7CF328E404", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FCF9D803-FF47-4400-B2C4-1F4EE28E5AA8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:*", matchCriteriaId: "2FFBFB96-1A35-4724-831B-68E3A9C32921", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cm_1542sp-1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8BF91884-7532-4E15-A754-EBC430FD0E9D", versionEndExcluding: "1.0.15", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cm_1542sp-1:-:*:*:*:*:*:*:*", matchCriteriaId: "921D7568-9FE9-4491-B099-A922984351DC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:siemens:simatic_s7-1500_software_controller:*:*:*:*:*:*:*:*", matchCriteriaId: "64D5B21D-0DC1-479B-810B-21E78F34A80A", versionEndExcluding: "2.1", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinumerik_828d_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "45B42950-8BD9-4933-9615-27FCC67C03A1", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinumerik_828d_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "86ADBE36-CC1F-4F3C-81CA-ABA0F40AC212", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinumerik_828d:-:*:*:*:*:*:*:*", matchCriteriaId: "7D97047C-9772-4AEB-B993-131EBBAE33BA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6377EA6B-8EE3-4208-8FB0-175684A77B3F", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "D5AE6E9A-02B9-4A69-ACC4-EFBE1767E51E", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinumerik_840d_sl:-:*:*:*:*:*:*:*", matchCriteriaId: "765286DF-07EC-4C7A-AB8C-09559CD977EA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_tdc_cpu555_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D87643C3-6525-4CBD-BC0C-6B4DC30C8642", versionEndExcluding: "1.1.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_tdc_cpu555:-:*:*:*:*:*:*:*", matchCriteriaId: "AE6AB995-D67B-43E5-B8FF-97C38D20CB10", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_tdc_cp51m1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5C936A7A-1AF9-44E4-9CEC-0694A424616B", versionEndExcluding: "1.1.8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_tdc_cp51m1:-:*:*:*:*:*:*:*", matchCriteriaId: "8DA1E7C4-6352-41A4-8A94-C24DDB456572", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.", }, { lang: "es", value: "Los paquetes PROFINET DCP especialmente diseñados que se envían en un segmento Ethernet local (capa 2) a un producto afectado podrían causar una condición de denegación de servicio de ese producto. Se requiere la interacción humana para recuperar el sistema. Las interfaces PROFIBUS no están afectadas. Esta vulnerabilidad sólo afecta a los SIMATIC HMI Multi Panels y HMI Mobile Panels, y a los dispositivos S7-300/S7-400", }, ], id: "CVE-2017-2681", lastModified: "2024-11-21T03:23:57.917", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "LOW", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "COMPLETE", baseScore: 6.1, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:L/Au:N/C:N/I:N/A:C", version: "2.0", }, exploitabilityScore: 6.5, impactScore: 6.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "ADJACENT_NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 2.8, impactScore: 3.6, source: "productcert@siemens.com", type: "Secondary", }, { cvssData: { attackComplexity: "LOW", attackVector: "ADJACENT_NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 2.8, impactScore: 3.6, source: "nvd@nist.gov", type: "Primary", }, ], cvssMetricV40: [ { cvssData: { Automatable: "NOT_DEFINED", Recovery: "NOT_DEFINED", Safety: "NOT_DEFINED", attackComplexity: "LOW", attackRequirements: "NONE", attackVector: "ADJACENT", availabilityRequirement: "NOT_DEFINED", baseScore: 7.1, baseSeverity: "HIGH", confidentialityRequirement: "NOT_DEFINED", exploitMaturity: "NOT_DEFINED", integrityRequirement: "NOT_DEFINED", modifiedAttackComplexity: "NOT_DEFINED", modifiedAttackRequirements: "NOT_DEFINED", modifiedAttackVector: "NOT_DEFINED", modifiedPrivilegesRequired: "NOT_DEFINED", modifiedSubAvailabilityImpact: "NOT_DEFINED", modifiedSubConfidentialityImpact: "NOT_DEFINED", modifiedSubIntegrityImpact: "NOT_DEFINED", modifiedUserInteraction: "NOT_DEFINED", modifiedVulnAvailabilityImpact: "NOT_DEFINED", modifiedVulnConfidentialityImpact: "NOT_DEFINED", modifiedVulnIntegrityImpact: "NOT_DEFINED", privilegesRequired: "NONE", providerUrgency: "NOT_DEFINED", subAvailabilityImpact: "NONE", subConfidentialityImpact: "NONE", subIntegrityImpact: "NONE", userInteraction: "NONE", valueDensity: "NOT_DEFINED", vectorString: "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", version: "4.0", vulnAvailabilityImpact: "HIGH", vulnConfidentialityImpact: "NONE", vulnIntegrityImpact: "NONE", vulnerabilityResponseEffort: "NOT_DEFINED", }, source: "productcert@siemens.com", type: "Secondary", }, ], }, published: "2017-05-11T10:29:00.180", references: [ { source: "productcert@siemens.com", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/98369", }, { source: "productcert@siemens.com", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1038463", }, { source: "productcert@siemens.com", url: "https://cert-portal.siemens.com/productcert/html/ssa-293562.html", }, { source: "productcert@siemens.com", tags: [ "Vendor Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf", }, { source: "productcert@siemens.com", tags: [ "Broken Link", ], url: "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/98369", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1038463", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://cert-portal.siemens.com/productcert/html/ssa-293562.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Broken Link", ], url: "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf", }, ], sourceIdentifier: "productcert@siemens.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-400", }, ], source: "productcert@siemens.com", type: "Secondary", }, { description: [ { lang: "en", value: "CWE-400", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2019-10-10 14:15
Modified
2024-11-21 04:20
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.
References
▼ | URL | Tags | |
---|---|---|---|
productcert@siemens.com | https://cert-portal.siemens.com/productcert/html/ssa-349422.html | ||
productcert@siemens.com | https://cert-portal.siemens.com/productcert/pdf/ssa-349422.pdf | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-349422.pdf | Vendor Advisory |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
siemens | cp1604_firmware | * | |
siemens | cp1604 | - | |
siemens | cp1616_firmware | * | |
siemens | cp1616 | - | |
siemens | dk_standard_ethernet_controller_firmware | * | |
siemens | dk_standard_ethernet_controller_firmware | 4.1.1 | |
siemens | dk_standard_ethernet_controller_firmware | 4.1.1 | |
siemens | dk_standard_ethernet_controller | - | |
siemens | ek-ertec_200_firmware | * | |
siemens | ek-ertec_200_firmware | 4.5.0 | |
siemens | ek-ertec_200 | - | |
siemens | ek-ertec_200p_firmware | * | |
siemens | ek-ertec_200p | - | |
siemens | scalance_x-200irt_firmware | * | |
siemens | scalance_x-200irt | - | |
siemens | simatic_et_200m_firmware | * | |
siemens | simatic_et_200m | - | |
siemens | simatic_et_200s_firmware | * | |
siemens | simatic_et_200s | - | |
siemens | simatic_et_200ecopn_firmware | * | |
siemens | simatic_et_200ecopn | - | |
siemens | simatic_pn\/pn_coupler_6es7158-3ad01-0xa0_firmware | * | |
siemens | simatic_pn\/pn_coupler_6es7158-3ad01-0xa0 | - | |
siemens | simatic_s7-300_cpu_firmware | * | |
siemens | simatic_s7-300_cpu | - | |
siemens | simatic_s7-300_cpu_312_ifm_firmware | * | |
siemens | simatic_s7-300_cpu_312_ifm | - | |
siemens | simatic_s7-300_cpu_313_firmware | * | |
siemens | simatic_s7-300_cpu_313 | - | |
siemens | simatic_s7-300_cpu_314_firmware | * | |
siemens | simatic_s7-300_cpu_314 | - | |
siemens | simatic_s7-300_cpu_314_ifm_firmware | * | |
siemens | simatic_s7-300_cpu_314_ifm | - | |
siemens | simatic_s7-300_cpu_315_firmware | * | |
siemens | simatic_s7-300_cpu_315 | - | |
siemens | simatic_s7-300_cpu_315-2_dp_firmware | * | |
siemens | simatic_s7-300_cpu_315-2_dp | - | |
siemens | simatic_s7-300_cpu_316-2_dp_firmware | * | |
siemens | simatic_s7-300_cpu_316-2_dp | - | |
siemens | simatic_s7-300_cpu_318-2_firmware | * | |
siemens | simatic_s7-300_cpu_318-2 | - | |
siemens | simatic_s7-400_v6_firmware | * | |
siemens | simatic_s7-400_v6 | - | |
siemens | simatic_s7-400_pn_v7_firmware | * | |
siemens | simatic_s7-400_pn_v7 | - | |
siemens | simatic_s7-400_dp_v7_firmware | * | |
siemens | simatic_s7-400_dp_v7 | - | |
siemens | simatic_winac_rtx_\(f\)_firmware | * | |
siemens | simatic_winac_rtx_\(f\)_firmware | 2010 | |
siemens | simatic_winac_rtx_\(f\)_firmware | 2010 | |
siemens | simatic_winac_rtx_\(f\)_firmware | 2010 | |
siemens | simatic_winac_rtx_\(f\) | - | |
siemens | simotion_firmware | * | |
siemens | simotion | - | |
siemens | sinamics_dcm_firmware | * | |
siemens | sinamics_dcm_firmware | 1.5 | |
siemens | sinamics_dcm | - | |
siemens | sinamics_dcp_firmware | * | |
siemens | sinamics_dcp | - | |
siemens | sinamics_g110m_firmware | * | |
siemens | sinamics_g110m_firmware | 4.7 | |
siemens | sinamics_g110m | - | |
siemens | sinamics_g120_firmware | * | |
siemens | sinamics_g120_firmware | 4.7 | |
siemens | sinamics_g120 | - | |
siemens | sinamics_g130_firmware | * | |
siemens | sinamics_g130_firmware | 4.7 | |
siemens | sinamics_g130 | - | |
siemens | sinamics_g150_firmware | * | |
siemens | sinamics_g150 | - | |
siemens | sinamics_gh150_firmware | * | |
siemens | sinamics_gh150_firmware | 4.8 | |
siemens | sinamics_gh150 | - | |
siemens | sinamics_gl150_firmware | * | |
siemens | sinamics_gl150_firmware | 4.8 | |
siemens | sinamics_gl150 | - | |
siemens | sinamics_gm150_firmware | * | |
siemens | sinamics_gm150_firmware | 4.8 | |
siemens | sinamics_gm150 | - | |
siemens | sinamics_s110_firmware | * | |
siemens | sinamics_s110 | - | |
siemens | sinamics_s120_firmware | * | |
siemens | sinamics_s120_firmware | 4.7 | |
siemens | sinamics_s120 | - | |
siemens | sinamics_s150_firmware | * | |
siemens | sinamics_s150 | - | |
siemens | sinamics_sl150_firmware | * | |
siemens | sinamics_sl150_firmware | 4.7 | |
siemens | sinamics_sl150 | - | |
siemens | sinamics_sm120_firmware | * | |
siemens | sinamics_sm120 | - | |
siemens | sinumerik_828d | * | |
siemens | sinumerik_828d | 4.8 | |
siemens | sinumerik_828d | 4.8 | |
siemens | sinumerik_828d | 4.8 | |
siemens | sinumerik_828d | 4.8 | |
siemens | sinumerik_828d | 4.8 | |
siemens | sinumerik_840d_sl | * |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:cp1604_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "1D00494F-8BC7-44C1-816E-0266920F8659", versionEndExcluding: "2.8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:cp1604:-:*:*:*:*:*:*:*", matchCriteriaId: "6222006F-09D7-49F7-B8C7-4D94298A8F6A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:cp1616_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0B1E2552-2661-40FB-A88A-4383064A58F3", versionEndExcluding: "2.8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:cp1616:-:*:*:*:*:*:*:*", matchCriteriaId: "184365A2-BAD2-4926-ACEE-F71E018D3CE5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0FE40195-DE5A-4B9C-9455-FAF92FF090D0", versionEndExcluding: "4.1.1", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:-:*:*:*:*:*:*", matchCriteriaId: "9B339839-3D74-4E13-9EB6-24CA46F991A5", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:p4:*:*:*:*:*:*", matchCriteriaId: "92416826-BD34-4611-A5FE-F315C9E8727F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:dk_standard_ethernet_controller:-:*:*:*:*:*:*:*", matchCriteriaId: "53DF35F1-94FF-4D0B-9FA2-E8B0AFAEA5FF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:ek-ertec_200_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "191FC7FB-791D-44E9-99C8-6CE15C99D057", versionEndExcluding: "4.5.0", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:ek-ertec_200_firmware:4.5.0:-:*:*:*:*:*:*", matchCriteriaId: "F894A35F-CB1A-4653-9157-DBCE16247D09", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:ek-ertec_200:-:*:*:*:*:*:*:*", matchCriteriaId: "B47CF3BB-08E4-4B86-B793-8253C172D846", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:ek-ertec_200p_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D2859C30-0E12-437E-A07A-7B25D841CFDE", versionEndExcluding: "4.5.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:ek-ertec_200p:-:*:*:*:*:*:*:*", matchCriteriaId: "FB75CD44-5223-40A7-A835-111BF3C25D23", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_x-200irt_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4E299AC3-800C-4C27-956A-C7B8DF5F00D0", versionEndExcluding: "5.2.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_x-200irt:-:*:*:*:*:*:*:*", matchCriteriaId: "94C7BE35-D3A6-488C-BB3D-D17D65DF4B80", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200m_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "14E56570-5C20-40BD-BF0B-F6ED06AFC8F7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200m:-:*:*:*:*:*:*:*", matchCriteriaId: "7037E46B-4FE5-4693-B6A6-B5AF7B652C4F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200s_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BB063929-AAB0-4FF8-BCA3-71BA80517B1A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200s:-:*:*:*:*:*:*:*", matchCriteriaId: "A1EC40E7-F004-446C-B5C9-0AB9911105E0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200ecopn_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3EE0B998-E408-408F-8F78-5E90F74E9C9B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200ecopn:-:*:*:*:*:*:*:*", matchCriteriaId: "0259EAE9-0CA0-49A5-A573-8339604A181B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_pn\\/pn_coupler_6es7158-3ad01-0xa0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "17C73DE7-4462-4C7B-8475-D5E6075C8E00", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_pn\\/pn_coupler_6es7158-3ad01-0xa0:-:*:*:*:*:*:*:*", matchCriteriaId: "2155DBBF-98F3-42A2-8DB1-0BB27984D0E0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "C87674A8-B518-4910-B03D-FFF4D5A7B627", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu:-:*:*:*:*:*:*:*", matchCriteriaId: "602FB384-0DB2-488C-B3CC-96E3A2882976", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_312_ifm_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7B0C6327-7BF6-4B96-82A8-D750007869EE", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu_312_ifm:-:*:*:*:*:*:*:*", matchCriteriaId: "CCFCAA2B-71FE-4DB4-B8B0-F5FD1254C331", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_313_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3EF9F3FB-FBBA-42A8-9A90-FE34703274B5", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu_313:-:*:*:*:*:*:*:*", matchCriteriaId: "4E6E900F-63C1-4E50-9DCD-26CE760E5275", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_314_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8F2F0659-CD37-4AA9-B7D5-44639515533C", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu_314:-:*:*:*:*:*:*:*", matchCriteriaId: "78399465-EED5-4EBD-A2E1-6FE0BD01EDB4", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_314_ifm_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "07AD63B6-B05C-4BBF-812D-379C4D8F8CC7", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu_314_ifm:-:*:*:*:*:*:*:*", matchCriteriaId: "8BE7963C-7AFF-495B-9F0B-28FB393443FD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_315_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7F2A0C75-E360-4E3D-85DA-878E39054E26", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu_315:-:*:*:*:*:*:*:*", matchCriteriaId: "E3962681-E32E-4BD1-8C71-8768248691D4", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_315-2_dp_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "488F0774-43DA-455D-905C-C514A0192260", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu_315-2_dp:-:*:*:*:*:*:*:*", matchCriteriaId: "E8FD8E6D-0527-4215-B6F0-5824011433FB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_316-2_dp_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F103C351-99C9-4F7D-B69A-D8A876F57504", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu_316-2_dp:-:*:*:*:*:*:*:*", matchCriteriaId: "644AD6A8-AEDE-4F1C-92F8-836877A81310", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_318-2_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BA99549B-5E95-445A-A95B-1CDA7014686B", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu_318-2:-:*:*:*:*:*:*:*", matchCriteriaId: "FF58C652-E74D-4B57-A7C5-08D7446863D5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-400_v6_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "C7B2893A-F0B4-4795-AF1C-DFF17D493929", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-400_v6:-:*:*:*:*:*:*:*", matchCriteriaId: "A6445275-2AEF-4285-BE7A-67F20182481C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-400_pn_v7_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "1B6B9D8B-D7BA-4D72-97C7-7BBEB49802F7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-400_pn_v7:-:*:*:*:*:*:*:*", matchCriteriaId: "E4F8215E-E737-4CD5-B7D9-57FE4A2A2FE5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-400_dp_v7_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "72F7B870-35A1-4900-8104-1303F291E29A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-400_dp_v7:-:*:*:*:*:*:*:*", matchCriteriaId: "ABE9F7D2-22C7-4E7C-99C3-4A88CDD2CDB7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "9D03BD73-51ED-42E0-A552-C32BB7A935B2", versionEndExcluding: "2010", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_firmware:2010:-:*:*:*:*:*:*", matchCriteriaId: "7151A19C-0AE5-4F66-9E3D-8BF675A8430C", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_firmware:2010:sp1:*:*:*:*:*:*", matchCriteriaId: "BEEB72F4-AE57-49DD-8876-1BCA7B805692", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_firmware:2010:sp2:*:*:*:*:*:*", matchCriteriaId: "7929F123-AC76-4F49-940F-558CABC25E75", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_winac_rtx_\\(f\\):-:*:*:*:*:*:*:*", matchCriteriaId: "C6143A7A-9D01-4D13-B0F5-2AD0DD6DA5EE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simotion_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "080E9ADC-C88F-45D4-8453-6E5E25371476", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simotion:-:*:*:*:*:*:*:*", matchCriteriaId: "879CF09E-4735-4A73-8E7B-215F2701F7E0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_dcm_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "84B1F9B1-4248-4A4C-A8BB-77475A0E9B9B", versionEndExcluding: "1.5", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_dcm_firmware:1.5:-:*:*:*:*:*:*", matchCriteriaId: "F2F99FFB-C312-4080-9580-84AFB7C9FA09", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_dcm:-:*:*:*:*:*:*:*", matchCriteriaId: "A1A43D34-ECA3-4330-B85F-02BDD1D22149", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_dcp_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "83803F1C-4842-43BB-B903-C2E91FF7DC08", versionEndExcluding: "1.3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:*", matchCriteriaId: "B75F50CA-7371-4BC7-8D8A-13F8BC69E4EB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g110m_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "775C90BB-C026-435C-889A-517EF85656C5", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_g110m_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "CAA92AC6-7DA0-418D-A13F-69268DFD7966", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g110m:-:*:*:*:*:*:*:*", matchCriteriaId: "D61D3E9C-1346-4354-BCD9-B02F67500C41", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g120_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B1DBCA1A-27F3-4E9A-9F89-65E82A68DE4A", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_g120_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "94CB2F3E-AAA1-4472-BFD4-4E6E1B663FF5", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g120:-:*:*:*:*:*:*:*", matchCriteriaId: "61A60DCE-384B-43A4-A669-973FB8ECA932", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g130_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4B3B0706-47CD-43FB-8E3A-7EEEF020AFBA", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_g130_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "1D36CF8D-6DA4-49ED-9EF1-F96292F671EE", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:*", matchCriteriaId: "373DBE44-AC28-4D04-93BB-35CD8C60E899", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "07F8091F-C17A-4913-A1BC-A7BA376B595F", versionEndExcluding: "4.8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:*", matchCriteriaId: "2296CA65-0E89-4BCB-8003-E7212BF1F585", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_gh150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6E231DE7-8B8D-41A3-A163-CE8EF50AF9D0", versionEndExcluding: "4.8", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_gh150_firmware:4.8:-:*:*:*:*:*:*", matchCriteriaId: "6D076504-AFE3-4C51-80E5-C5992CA7D511", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_gh150:-:*:*:*:*:*:*:*", matchCriteriaId: "BF977545-395A-4C34-BB22-A1047B5B6E85", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_gl150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3653DA37-DB23-41E0-8CE8-838E384AA40A", versionEndExcluding: "4.8", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_gl150_firmware:4.8:-:*:*:*:*:*:*", matchCriteriaId: "0F86A334-10F9-4DFB-A421-CBCAFD86C8C2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_gl150:-:*:*:*:*:*:*:*", matchCriteriaId: "DED7F33B-D475-4232-8683-48554A6729F7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_gm150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0E25804D-D943-4C2A-9C78-AAC61F7BA4FF", versionEndExcluding: "4.8", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_gm150_firmware:4.8:-:*:*:*:*:*:*", matchCriteriaId: "06B69CD4-3AEC-4014-81DB-33805A44A5D3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_gm150:-:*:*:*:*:*:*:*", matchCriteriaId: "DD76CFB0-B5D7-40DC-8D14-FC9C9BACF3CD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s110_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "243FFEA3-7193-45EA-B865-E9CA1D6656FE", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s110:-:*:*:*:*:*:*:*", matchCriteriaId: "6218802E-D3B1-4197-A6B5-7343A50F7D88", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s120_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "77A0BE57-1A9A-4564-9C53-CF47DEEF7991", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_s120_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "376556D0-1AE2-4F80-B3CE-C0251E35C326", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*", matchCriteriaId: "E5A824BD-935F-4E53-8313-C5544B0489C7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "22AFC8AE-8AF0-4418-B251-4CE293B9DCD8", versionEndExcluding: "4.8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:*", matchCriteriaId: "0D48682C-A39D-4A09-B904-50FA64A9D2A5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_sl150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "30E52510-9306-42B8-A517-A6BBD34B8B9D", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_sl150_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "58A71910-E54F-426B-BAB1-260AEFD8EF6E", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_sl150:-:*:*:*:*:*:*:*", matchCriteriaId: "C6619B0F-7CDC-40A6-89B2-C6067AF45214", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_sm120_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "CFFE3048-EEB0-48A0-BED0-8647284B022B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_sm120:-:*:*:*:*:*:*:*", matchCriteriaId: "444DD77F-DB65-4766-A89D-7A679B4CA1E1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:siemens:sinumerik_828d:*:*:*:*:*:*:*:*", matchCriteriaId: "328F0192-B34D-481C-8964-226317439966", versionEndExcluding: "4.8", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:sinumerik_828d:4.8:-:*:*:*:*:*:*", matchCriteriaId: "C7936CF6-DC07-4550-9FEC-823A2F49096D", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:sinumerik_828d:4.8:sp1:*:*:*:*:*:*", matchCriteriaId: "BEE7D914-F2DE-4D8C-BFB2-7AD16650CD3F", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:sinumerik_828d:4.8:sp2:*:*:*:*:*:*", matchCriteriaId: "BDBAEDBC-6A76-495D-9BC7-BA687F32EE40", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:sinumerik_828d:4.8:sp3:*:*:*:*:*:*", matchCriteriaId: "45EF769B-1EB1-4D2D-84C5-8005EF1EE1EF", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:sinumerik_828d:4.8:sp4:*:*:*:*:*:*", matchCriteriaId: "48EE5859-5450-4078-94E7-E525B999A837", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:siemens:sinumerik_840d_sl:*:*:*:*:*:*:*:*", matchCriteriaId: "9FFC86D6-F312-4097-91A6-79C78502323F", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.", }, { lang: "es", value: "Se ha identificado una vulnerabilidad en Development/Evaluation Kits para PROFINET IO: DK Standard Ethernet Controller (Todas las versiones anteriores a la versión V4.1.1 Patch 05), Development/Evaluation Kits para PROFINET IO: EK-ERTEC 200 (Todas las versiones anteriores a la versión V4.5.0 Patch 01), Development/Evaluation Kits para PROFINET IO: EK-ERTEC 200P (Todas las versiones anteriores a la versión V4.5.0), familia de switches SCALANCE X-200IRT (incluidas las variantes SIPLUS NET) (Todas las versiones anteriores a la versión V5.2.1), SIMATIC ET200M (incluidas las variantes SIPLUS) (Todas las versiones), SIMATIC ET200S (incluidas las variantes SIPLUS) (Todas las versiones), SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 (Todas las versiones), SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 (Todas las versiones), SIMATIC ET200ecoPN, 4AO U/I 4xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 (Todas las versiones), SIMATIC ET200ecoPN: IO-Link Master (Todas las versiones), SIMATIC ET200pro (Todas las versiones), SIMATIC NET CP 1604 (Todas las versiones anteriores a la versión V2.8), SIMATIC NET CP 1616 (Todas las versiones anteriores a la versión V2.8), SIMATIC PN/PN Coupler 6ES7158-3AD01-0XA0 (incluida la variante SIPLUS NET) (Todas las versiones), familia SIMATIC S7-300 CPU (incluyendo las variantes relacionadas ET200 CPUs y SIPLUS) (Todas las versiones anteriores a la versión V3.X.17), familia SIMATIC S7-400 PN/DP V6 y anteriores CPU (incluidas las variantes SIPLUS) (Todas las versiones), familia SIMATIC S7-400 PN/DP V7 CPU (incluidas las variantes SIPLUS) (Todas las versiones), SIMATIC WinAC RTX (F) 2010 (Todas las versiones anteriores a la versión SIMATIC WinAC RTX 2010 SP3), SIMOTION (incluidas las variantes SIPLUS) (Todas las versiones), SINAMICS DCM (Todas las versiones anteriores a la versión V1.5 HF1), SINAMICS DCP (Todas las versiones anteriores a la versión V1.3), SINAMICS G110M V4.7 Control Unit (Todas las versiones anteriores a la versión V4.7 SP10 HF5), SINAMICS G120 V4.7 Control Unit (incluidas las variantes SIPLUS) (Todas las versiones anteriores a la versión V4.7 SP10 HF5), SINAMICS G130 V4.7 Control Unit (Todas las versiones anteriores a la versión V4.7 HF29), SINAMICS G150 Control Unit (Todas las versiones anteriores a la versión V4.8), SINAMICS GH150 V4.7 Control Unit (Todas las versiones), SINAMICS GL150 V4.7 Control Unit (Todas las versiones), SINAMICS GM150 V4.7 Control Unit (Todas las versiones), SINAMICS S110 Control Unit (Todas las versiones), SINAMICS S120 V4.7 Control Unit and CBE20 (incluidas las variantes SIPLUS) (Todas las versiones anteriores a la versión V4.7 HF34), SINAMICS S150 Control Unit (Todas las versiones anteriores a la versión V4.8), SINAMICS SL150 V4.7 Control Unit (Todas las versiones anteriores a la versión V4.7 HF33), SINAMICS SM120 V4.7 Control Unit (Todas las versiones), SINUMERIK 828D (Todas las versiones anteriores a la versión V4.8 SP5), SINUMERIK 840D sl (Todas las versiones). Un atacante con acceso de red a un producto afectado puede causar una condición de denegación de servicio al romper la sincronización en tiempo real (IRT) de la instalación afectada. La vulnerabilidad de seguridad podría ser explotada por un atacante no autenticado con acceso de red a la instalación afectada. No se requiere interacción del usuario para explotar esta vulnerabilidad de seguridad. La vulnerabilidad afecta la disponibilidad de las instalaciones afectadas", }, ], id: "CVE-2019-10923", lastModified: "2024-11-21T04:20:09.600", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 3.9, impactScore: 3.6, source: "productcert@siemens.com", type: "Secondary", }, { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 3.9, impactScore: 3.6, source: "nvd@nist.gov", type: "Secondary", }, ], }, published: "2019-10-10T14:15:14.503", references: [ { source: "productcert@siemens.com", url: "https://cert-portal.siemens.com/productcert/html/ssa-349422.html", }, { source: "productcert@siemens.com", tags: [ "Vendor Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-349422.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-349422.pdf", }, ], sourceIdentifier: "productcert@siemens.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-400", }, ], source: "productcert@siemens.com", type: "Primary", }, { description: [ { lang: "en", value: "CWE-400", }, ], source: "nvd@nist.gov", type: "Secondary", }, ], }
Vulnerability from fkie_nvd
Published
2013-12-07 00:55
Modified
2025-04-11 00:51
Severity ?
Summary
Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.
References
▼ | URL | Tags | |
---|---|---|---|
cve@mitre.org | http://ics-cert.us-cert.gov/advisories/ICSA-13-338-01 | US Government Resource | |
cve@mitre.org | http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-742938.pdf | Vendor Advisory | |
cve@mitre.org | https://cert-portal.siemens.com/productcert/pdf/ssa-742938.pdf | ||
af854a3a-2127-422b-91ae-364da2661108 | http://ics-cert.us-cert.gov/advisories/ICSA-13-338-01 | US Government Resource | |
af854a3a-2127-422b-91ae-364da2661108 | http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-742938.pdf | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-742938.pdf |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
siemens | sinamics_s\/g_family_firmware | * | |
siemens | sinamics_g110 | - | |
siemens | sinamics_g110d | - | |
siemens | sinamics_g120 | - | |
siemens | sinamics_g120c | - | |
siemens | sinamics_g120d | - | |
siemens | sinamics_g120p | - | |
siemens | sinamics_g130 | - | |
siemens | sinamics_g150 | - | |
siemens | sinamics_g180 | - | |
siemens | sinamics_s110 | - | |
siemens | sinamics_s120 | - | |
siemens | sinamics_s120cm | - | |
siemens | sinamics_s150 | - |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s\\/g_family_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F15BC1E1-45E3-44F0-BD41-E7A73FB33662", versionEndIncluding: "4.6", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g110:-:*:*:*:*:*:*:*", matchCriteriaId: "E5ADF0BB-01FA-4FE4-BF4D-D33A6C5DAAFD", vulnerable: true, }, { criteria: "cpe:2.3:h:siemens:sinamics_g110d:-:*:*:*:*:*:*:*", matchCriteriaId: "5CE4257F-7262-4CC0-A874-374106B4B2C8", vulnerable: true, }, { criteria: "cpe:2.3:h:siemens:sinamics_g120:-:*:*:*:*:*:*:*", matchCriteriaId: "61A60DCE-384B-43A4-A669-973FB8ECA932", vulnerable: true, }, { criteria: "cpe:2.3:h:siemens:sinamics_g120c:-:*:*:*:*:*:*:*", matchCriteriaId: "909DED2E-4CA6-4A07-B924-797260FDE2E4", vulnerable: true, }, { criteria: "cpe:2.3:h:siemens:sinamics_g120d:-:*:*:*:*:*:*:*", matchCriteriaId: "75ED7DEA-67F8-4971-A076-79AF82026FD0", vulnerable: true, }, { criteria: "cpe:2.3:h:siemens:sinamics_g120p:-:*:*:*:*:*:*:*", matchCriteriaId: "21FAA04F-FBE9-4EFA-BE79-1EAFF47A20D3", vulnerable: true, }, { criteria: "cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:*", matchCriteriaId: "373DBE44-AC28-4D04-93BB-35CD8C60E899", vulnerable: true, }, { criteria: "cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:*", matchCriteriaId: "2296CA65-0E89-4BCB-8003-E7212BF1F585", vulnerable: true, }, { criteria: "cpe:2.3:h:siemens:sinamics_g180:-:*:*:*:*:*:*:*", matchCriteriaId: "EC515520-BB04-4849-ACE8-87ED5D591454", vulnerable: true, }, { criteria: "cpe:2.3:h:siemens:sinamics_s110:-:*:*:*:*:*:*:*", matchCriteriaId: "6218802E-D3B1-4197-A6B5-7343A50F7D88", vulnerable: true, }, { criteria: "cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*", matchCriteriaId: "E5A824BD-935F-4E53-8313-C5544B0489C7", vulnerable: true, }, { criteria: "cpe:2.3:h:siemens:sinamics_s120cm:-:*:*:*:*:*:*:*", matchCriteriaId: "C0ECF745-CE82-42C6-9EA0-12FBD89F6220", vulnerable: true, }, { criteria: "cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:*", matchCriteriaId: "0D48682C-A39D-4A09-B904-50FA64A9D2A5", vulnerable: true, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.", }, { lang: "es", value: "Los controladores Siemens SINAMICS S/G con firmware anterior a 4.6.11 no requiere autenticación para sesiones FTP y TELNET, lo que permite a atacantes remotos evadir restricciones de acceso intencionadas a través de trafico TCP al puerto (1) 21 o (2) 23.", }, ], id: "CVE-2013-6920", lastModified: "2025-04-11T00:51:21.963", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "HIGH", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "COMPLETE", baseScore: 10, confidentialityImpact: "COMPLETE", integrityImpact: "COMPLETE", vectorString: "AV:N/AC:L/Au:N/C:C/I:C/A:C", version: "2.0", }, exploitabilityScore: 10, impactScore: 10, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], }, published: "2013-12-07T00:55:04.147", references: [ { source: "cve@mitre.org", tags: [ "US Government Resource", ], url: "http://ics-cert.us-cert.gov/advisories/ICSA-13-338-01", }, { source: "cve@mitre.org", tags: [ "Vendor Advisory", ], url: "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-742938.pdf", }, { source: "cve@mitre.org", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-742938.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "US Government Resource", ], url: "http://ics-cert.us-cert.gov/advisories/ICSA-13-338-01", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-742938.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-742938.pdf", }, ], sourceIdentifier: "cve@mitre.org", vulnStatus: "Deferred", weaknesses: [ { description: [ { lang: "en", value: "CWE-287", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2017-05-11 01:29
Modified
2024-11-21 03:23
Severity ?
6.5 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.5 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.5 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.
References
▼ | URL | Tags | |
---|---|---|---|
productcert@siemens.com | http://www.securityfocus.com/bid/98369 | Third Party Advisory, VDB Entry | |
productcert@siemens.com | http://www.securitytracker.com/id/1038463 | Third Party Advisory, VDB Entry | |
productcert@siemens.com | https://cert-portal.siemens.com/productcert/html/ssa-284673.html | ||
productcert@siemens.com | https://cert-portal.siemens.com/productcert/html/ssa-293562.html | ||
productcert@siemens.com | https://cert-portal.siemens.com/productcert/html/ssa-546832.html | ||
productcert@siemens.com | https://cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf | Vendor Advisory | |
productcert@siemens.com | https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf | Vendor Advisory | |
productcert@siemens.com | https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf | Vendor Advisory | |
productcert@siemens.com | https://ics-cert.us-cert.gov/advisories/ICSA-18-023-02 | Third Party Advisory, US Government Resource | |
productcert@siemens.com | https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf | Broken Link | |
af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/98369 | Third Party Advisory, VDB Entry | |
af854a3a-2127-422b-91ae-364da2661108 | http://www.securitytracker.com/id/1038463 | Third Party Advisory, VDB Entry | |
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/html/ssa-284673.html | ||
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/html/ssa-293562.html | ||
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/html/ssa-546832.html | ||
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://ics-cert.us-cert.gov/advisories/ICSA-18-023-02 | Third Party Advisory, US Government Resource | |
af854a3a-2127-422b-91ae-364da2661108 | https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf | Broken Link |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
siemens | simatic_cp_343-1_std_firmware | * | |
siemens | simatic_cp_343-1_std | - | |
siemens | simatic_cp_343-1_lean_firmware | * | |
siemens | simatic_cp_343-1_lean | - | |
siemens | simatic_cp_343-1_adv_firmware | * | |
siemens | simatic_cp_343-1_adv | - | |
siemens | simatic_cp_443-1_std_firmware | * | |
siemens | simatic_cp_443-1_std | - | |
siemens | simatic_cp_443-1_adv_firmware | * | |
siemens | simatic_cp_443-1_adv | - | |
siemens | simatic_cp_443-1_opc-ua_firmware | * | |
siemens | simatic_cp_443-1_opc-ua | - | |
siemens | simatic_cp_1243-1_firmware | * | |
siemens | simatic_cp_1243-1 | - | |
siemens | simatic_cm_1542-1_firmware | * | |
siemens | simatic_cm_1542-1 | - | |
siemens | simatic_cp_1542sp-1_firmware | * | |
siemens | simatic_cp_1542sp-1 | - | |
siemens | simatic_cp_1542sp-1_irc_firmware | * | |
siemens | simatic_cp_1542sp-1_irc | - | |
siemens | simatic_cp_1543sp-1_firmware | * | |
siemens | simatic_cp_1543sp-1 | - | |
siemens | simatic_cp_1543-1_firmware | * | |
siemens | simatic_cp_1543-1 | - | |
siemens | simatic_rf650r_firmware | * | |
siemens | simatic_rf650r | - | |
siemens | simatic_rf680r_firmware | * | |
siemens | simatic_rf680r | - | |
siemens | simatic_rf685r_firmware | * | |
siemens | simatic_rf685r | - | |
siemens | simatic_cp_1616_firmware | * | |
siemens | simatic_cp_1616 | - | |
siemens | simatic_cp_1604_firmware | * | |
siemens | simatic_cp_1604 | - | |
siemens | simatic_dk-1616_pn_io_firmware | * | |
siemens | simatic_dk-1616_pn_io | - | |
siemens | scalance_x200_firmware | * | |
siemens | scalance_x200 | - | |
siemens | scalance_x200_irt_firmware | * | |
siemens | scalance_x200_irt | - | |
siemens | scalance_x300_firmware | * | |
siemens | scalance_x300 | - | |
siemens | scalance_x408_firmware | * | |
siemens | scalance_x408 | - | |
siemens | scalance_x414_firmware | * | |
siemens | scalance_x414 | - | |
siemens | scalance_xm400_firmware | * | |
siemens | scalance_xm400 | - | |
siemens | scalance_xr500_firmware | * | |
siemens | scalance_xr500 | - | |
siemens | scalance_w700_firmware | * | |
siemens | scalance_w700 | - | |
siemens | scalance_m-800_firmware | * | |
siemens | scalance_m-800 | - | |
siemens | scalance_s615_firmware | * | |
siemens | scalance_s615 | - | |
siemens | softnet_profinet_io_firmware | * | |
siemens | softnet_profinet_io_firmware | 14 | |
siemens | softnet_profinet_io | - | |
siemens | ie\/pb-link_firmware | * | |
siemens | ie\/pb-link | - | |
siemens | ie\/as-i_link_pn_io_firmware | * | |
siemens | ie\/as-i_link_pn_io | - | |
siemens | simatic_teleservice_adapter_ie_standard_firmware | * | |
siemens | simatic_teleservice_adapter_ie_standard | - | |
siemens | simatic_teleservice_adapter_ie_basic_firmware | * | |
siemens | simatic_teleservice_adapter_ie_basic | - | |
siemens | simatic_teleservice_adapter_ie_advanced_firmware | * | |
siemens | simatic_teleservice_adapter_ie_advanced_modem | - | |
siemens | sitop_psu8600_firmware | * | |
siemens | sitop_psu8600 | - | |
siemens | ups1600_profinet_firmware | * | |
siemens | ups1600_profinet | - | |
siemens | simatic_et_200al_firmware | * | |
siemens | simatic_et_200al | - | |
siemens | simatic_et_200ecopn_firmware | * | |
siemens | simatic_et_200ecopn | - | |
siemens | simatic_et_200m_firmware | * | |
siemens | simatic_et_200m | - | |
siemens | simatic_et_200mp_firmware | * | |
siemens | simatic_et_200mp | - | |
siemens | simatic_et_200pro_firmware | * | |
siemens | simatic_et_200pro | - | |
siemens | simatic_et_200s_firmware | * | |
siemens | simatic_et_200s | - | |
siemens | simatic_et_200sp_firmware | * | |
siemens | simatic_et_200sp | - | |
siemens | pn\/pn_coupler_firmware | * | |
siemens | pn\/pn_coupler | - | |
siemens | dk_standard_ethernet_controller_firmware | * | |
siemens | dk_standard_ethernet_controller_firmware | 4.1.1 | |
siemens | dk_standard_ethernet_controller | - | |
siemens | ek-ertec_200p_pn_io_firmware | * | |
siemens | ek-ertec_200p_pn_io_firmware | 4.4.0 | |
siemens | ek-ertec_200p_pn_io | - | |
siemens | ek-ertec_200_pn_io_firmware | * | |
siemens | ek-ertec_200_pn_io_firmware | 4.2.1 | |
siemens | ek-ertec_200_pn_io | - | |
siemens | simatic_s7-200_smart_firmware | * | |
siemens | simatic_s7-200_smart | - | |
siemens | simatic_s7-300_firmware | - | |
siemens | simatic_s7-300 | - | |
siemens | simatic_s7-400_firmware | * | |
siemens | simatic_s7-400 | - | |
siemens | simatic_s7-1200_firmware | * | |
siemens | simatic_s7-1200 | - | |
siemens | simatic_s7-1500_firmware | * | |
siemens | simatic_s7-1500 | - | |
siemens | simatic_s7-1500_software_controller_firmware | * | |
siemens | simatic_s7-1500_software_controller | - | |
siemens | simatic_winac_rtx_firmware | * | |
siemens | simatic_winac_rtx_firmware | 2010 | |
siemens | simatic_winac_rtx | - | |
siemens | sirius_act_3su1_firmware | * | |
siemens | sirius_act_3su1 | - | |
siemens | sirius_soft_starter_3rw44_pn_firmware | * | |
siemens | sirius_soft_starter_3rw44_pn | - | |
siemens | sirius_motor_starter_m200d_profinet_firmware | * | |
siemens | sirius_motor_starter_m200d_profinet | - | |
siemens | simocode_pro_v_profinet_firmware | * | |
siemens | simocode_pro_v_profinet | - | |
siemens | sinamics_dcm_firmware | * | |
siemens | sinamics_dcm_firmware | 1.4 | |
siemens | sinamics_dcm_firmware | 1.4 | |
siemens | sinamics_dcm | - | |
siemens | sinamics_dcp_firmware | * | |
siemens | sinamics_dcp_firmware | 1.2 | |
siemens | sinamics_dcp | - | |
siemens | sinamics_g110m_firmware | * | |
siemens | sinamics_g110m_firmware | 4.7 | |
siemens | sinamics_g110m | - | |
siemens | sinamics_g120\(c\/p\/d\)_w._pn_firmware | * | |
siemens | sinamics_g120\(c\/p\/d\)_w._pn_firmware | 4.7 | |
siemens | sinamics_g120\(c\/p\/d\)_w._pn | - | |
siemens | sinamics_g130_firmware | * | |
siemens | sinamics_g130_firmware | 4.7 | |
siemens | sinamics_g130 | - | |
siemens | sinamics_g150_firmware | * | |
siemens | sinamics_g150_firmware | 4.7 | |
siemens | sinamics_g150 | - | |
siemens | sinamics__s110_pn_firmware | * | |
siemens | sinamics__s110_pn_firmware | 4.4 | |
siemens | _s110_pn | - | |
siemens | sinamics_s120_firmware | * | |
siemens | sinamics_s120_firmware | 4.7 | |
siemens | sinamics_s120 | - | |
siemens | sinamics_s150_firmware | * | |
siemens | sinamics_s150_firmware | 4.7 | |
siemens | sinamics_s150 | - | |
siemens | sinamics_v90_pn_firmware | * | |
siemens | sinamics_v90_pn | - | |
siemens | simotion_firmware | * | |
siemens | simotion_firmware | 4.5 | |
siemens | simotion | - | |
siemens | sinumerik_828d_firmware | * | |
siemens | sinumerik_828d_firmware | 4.5 | |
siemens | sinumerik_828d | - | |
siemens | sinumerik_840d_sl_firmware | * | |
siemens | sinumerik_840d_sl_firmware | 4.5 | |
siemens | sinumerik_840d_sl | - | |
siemens | simatic_hmi_comfort_panels | * | |
siemens | simatic_hmi_comfort_panels | - | |
siemens | simatic_hmi_multi_panels | * | |
siemens | simatic_hmi_multi_panels | - | |
siemens | simatic_hmi_mobile_panels | * | |
siemens | simatic_hmi_mobile_panels | - | |
siemens | simatic_cp_1243-1_irc_firmware | * | |
siemens | simatic_cp_1243-1_irc | - | |
siemens | simatic_cp_1243-1_iec_firmware | * | |
siemens | simatic_cp_1243-1_iec | - | |
siemens | simatic_cp_1243-1_dnp3_firmware | * | |
siemens | simatic_cp_1243-1_dnp3 | - | |
siemens | simatic_dk-1604_pn_io_firmware | * | |
siemens | simatic_dk-1604_pn_io | - | |
siemens | simatic_tdc_cpu555_firmware | * | |
siemens | simatic_tdc_cpu555 | - | |
siemens | simatic_tdc_cp51m1_firmware | * | |
siemens | simatic_tdc_cp51m1 | - | |
siemens | sinamics_gh150_firmware | * | |
siemens | sinamics_gh150_firmware | 4.7 | |
siemens | sinamics_gh150 | - | |
siemens | sinamics_gl150_firmware | * | |
siemens | sinamics_gl150_firmware | 4.8 | |
siemens | sinamics_gl150 | - | |
siemens | sinamics_gm150_firmware | * | |
siemens | sinamics_gm150_firmware | 4.7 | |
siemens | sinamics_gm150 | - | |
siemens | sinamics_sl150_firmware | * | |
siemens | sinamics_sl150_firmware | 4.8 | |
siemens | sinamics_sl150 | - | |
siemens | sinamics_sm120_firmware | * | |
siemens | sinamics_sm120_firmware | 4.8 | |
siemens | sinamics_sm120 | - | |
siemens | extension_unit_12_profinet_firmware | * | |
siemens | extension_unit_12_profinet | - | |
siemens | extension_unit_15_profinet_firmware | * | |
siemens | extension_unit_15_profinet | - | |
siemens | extension_unit_19_profinet_firmware | * | |
siemens | extension_unit_19_profinet | - | |
siemens | extension_unit_22_profinet_firmware | * | |
siemens | extension_unit_22_profinet | - | |
siemens | simatic_cp_1242-7_gprs_firmware | * | |
siemens | simatic_cp_1242-7_gprs | - | |
siemens | simatic_cp_1243-7_lte\/us_firmware | * | |
siemens | simatic_cp_1243-7_lte\/us | - | |
siemens | simatic_cp_1243-8_firmware | * | |
siemens | simatic_cp_1243-8 | - | |
siemens | simatic_cp_1626_firmware | * | |
siemens | simatic_cp_1626 | - |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_343-1_std_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "CFF143FA-311E-4081-805F-BBDB72003556", versionEndExcluding: "3.1.3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_343-1_std:-:*:*:*:*:*:*:*", matchCriteriaId: "9C351559-6D8D-4EA8-87D6-83003844BD97", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_343-1_lean_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "47A5C59B-DAB3-4B05-B9FA-B75685F4AE2A", versionEndExcluding: "3.1.3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_343-1_lean:-:*:*:*:*:*:*:*", matchCriteriaId: "EE2A18E2-F88F-4DC1-81E9-AC836C85A248", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_343-1_adv_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7E0622A2-C918-4062-938A-8736469F8286", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_343-1_adv:-:*:*:*:*:*:*:*", matchCriteriaId: "438184C5-3A2C-4DEE-8FF2-0EFBAA1BA37A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_443-1_std_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BB8BECDB-D55A-4B74-ADEC-CDDBAC4E3481", versionEndExcluding: "3.2.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_443-1_std:-:*:*:*:*:*:*:*", matchCriteriaId: "BB8C873A-25EB-4787-9F25-DC5852337093", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_443-1_adv_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "58E4035F-02AB-4B6D-A9AF-556DBE021C30", versionEndExcluding: "3.2.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_443-1_adv:-:*:*:*:*:*:*:*", matchCriteriaId: "75013961-5B00-42E9-9061-CF2E9A4FC090", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_443-1_opc-ua_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "32DC8BB2-9BC6-4CC2-9CF0-28DF8AEC595A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_443-1_opc-ua:-:*:*:*:*:*:*:*", matchCriteriaId: "977E97C8-959F-4146-8BFD-0FCF014B1534", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "EBE1A019-4BC4-4352-BA16-05629A20F89F", versionEndExcluding: "2.1.82", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:*", matchCriteriaId: "CA9BB25C-D5E3-43DE-8C73-06BDC43CA960", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cm_1542-1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6BE0A3E5-0069-4AD5-B287-88BE5D0291F1", versionEndExcluding: "2.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cm_1542-1:-:*:*:*:*:*:*:*", matchCriteriaId: "FCB3A00F-252F-4E41-8254-6E8BBD40C4FD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1542sp-1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "18B597C8-0401-458F-8DF9-062B5E833115", versionEndExcluding: "1.0.15", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:*", matchCriteriaId: "0C868560-8BAE-462D-AED0-3C52EA9B6DB8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A6AF0B55-84D1-46FA-B3A1-81EB2E2FED18", versionEndExcluding: "1.0.15", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:*", matchCriteriaId: "E362CEA5-F47B-4294-8F2D-A0A7AC6FF390", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "CA3E3782-7F36-4BC3-8D00-E1961E3105E3", versionEndExcluding: "1.0.15", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:*", matchCriteriaId: "843A8686-5172-4782-BB97-B5D3C6FB27A3", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1543-1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "807D97E1-7680-4B8F-85AD-F56F039669D1", versionEndExcluding: "2.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1543-1:-:*:*:*:*:*:*:*", matchCriteriaId: "3FDE92FB-38C7-46E8-9208-BBD7872219D5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_rf650r_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "37B4E3A9-FE27-4A31-A213-92B461A5C846", versionEndExcluding: "3.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_rf650r:-:*:*:*:*:*:*:*", matchCriteriaId: "C82C2C69-D983-4317-968B-D1855DF8AE43", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_rf680r_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "177A6E55-8D64-4CB8-B366-AE272E715932", versionEndExcluding: "3.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_rf680r:-:*:*:*:*:*:*:*", matchCriteriaId: "450DE127-DFED-4799-B8EA-0F95028E4BC3", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_rf685r_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "72D14DB5-6132-4442-8AB2-3ECE89B1D47C", versionEndExcluding: "3.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_rf685r:-:*:*:*:*:*:*:*", matchCriteriaId: "63F70060-0090-4BD7-8BF6-769989879ACD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1616_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4FDC53A8-3F99-481E-9B0A-F5AF296B5BD6", versionEndExcluding: "2.7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1616:-:*:*:*:*:*:*:*", matchCriteriaId: "CA074FBE-1C3E-4441-8C51-52B555B85D9F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1604_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0424AECD-68D5-45F1-9F55-B72CB4DFE39C", versionEndExcluding: "2.7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1604:-:*:*:*:*:*:*:*", matchCriteriaId: "6304FA24-F194-4EE2-95F5-35D086F82C01", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_dk-1616_pn_io_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "39663B8F-F349-49B3-A0CB-004F11D01E34", versionEndExcluding: "2.7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_dk-1616_pn_io:-:*:*:*:*:*:*:*", matchCriteriaId: "C8F515DF-36AC-49C1-B013-E87529775AB3", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_x200_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "45008AE8-8386-4CBA-8C38-10C1A60150C2", versionEndExcluding: "5.2.2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_x200:-:*:*:*:*:*:*:*", matchCriteriaId: "A59C91EA-5D1B-4970-8C36-BD76BA420B12", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_x200_irt_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7F61995A-2018-4DAA-9529-BADC145B267F", versionEndExcluding: "5.4.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_x200_irt:-:*:*:*:*:*:*:*", matchCriteriaId: "CAF3DA7A-6B80-4F20-835F-BF071197D1B0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_x300_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "CC97A506-7E63-43A3-ACB0-DDAF3C5369C3", versionEndExcluding: "4.1.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_x300:-:*:*:*:*:*:*:*", matchCriteriaId: "E3F6299B-D7E3-4750-B016-7DCBC83C2287", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_x408_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B8A4CF89-9DDA-4974-A886-CC0A912017F7", versionEndExcluding: "4.1.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_x408:-:*:*:*:*:*:*:*", matchCriteriaId: "47F713E4-4B75-476E-BC21-92CA10198AE9", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_x414_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2CA7C987-779A-4B64-BFAC-73D54618AF04", versionEndExcluding: "3.10.2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_x414:-:*:*:*:*:*:*:*", matchCriteriaId: "7E4C1BEF-D6B4-4260-9AC5-6F903EF6F4B1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_xm400_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F6EB11E9-4036-4A93-91DC-4D987B5FE2BA", versionEndExcluding: "6.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_xm400:-:*:*:*:*:*:*:*", matchCriteriaId: "9FC408A8-903F-43A2-9D05-65AD4482FDBB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_xr500_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4B9AF696-211F-4CAD-8A0E-402487E8DC50", versionEndExcluding: "6.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_xr500:-:*:*:*:*:*:*:*", matchCriteriaId: "080E722F-FCD4-4967-86EE-151ADC5702E7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_w700_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D8763BB9-5DDA-4817-BDA6-63983CD4BC67", versionEndExcluding: "6.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_w700:-:*:*:*:*:*:*:*", matchCriteriaId: "D3033B1E-57A6-4AE3-A861-7047CF8EAD79", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B74BBB98-0146-467E-B77B-E2FA1ABF2ED5", versionEndExcluding: "4.03", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*", matchCriteriaId: "DFB9921A-5204-40A3-88AB-B7755F5C6875", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B2345F75-2CD1-4014-8F90-36A4FB4CC3BE", versionEndExcluding: "4.03", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*", matchCriteriaId: "E917CBBB-EF41-4113-B0CA-EB91889235E7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:softnet_profinet_io_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "9831567D-6528-4ACA-99F9-1EC42CB4A90D", versionEndExcluding: "14", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:softnet_profinet_io_firmware:14:-:*:*:*:*:*:*", matchCriteriaId: "27BC04E4-8C6F-4A66-86C4-A8F793A10BDD", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:softnet_profinet_io:-:*:*:*:*:*:*:*", matchCriteriaId: "E348069A-B809-4DF6-81E9-DC52C6E2C268", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:ie\\/pb-link_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8ED91175-0AF3-424A-8C49-43587BB95EAB", versionEndExcluding: "3.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:ie\\/pb-link:-:*:*:*:*:*:*:*", matchCriteriaId: "8D43C16C-0719-4648-903F-6CC0FFF1835A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:ie\\/as-i_link_pn_io_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7E909C1E-9329-4459-ACE3-AD906CD4A968", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:ie\\/as-i_link_pn_io:-:*:*:*:*:*:*:*", matchCriteriaId: "317863B6-0B71-4D03-83FE-FC59EBB5307C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_standard_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5C887573-8BE8-42CF-B35A-22F9311AC627", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_standard:-:*:*:*:*:*:*:*", matchCriteriaId: "3A5A3F7E-D039-430F-89B0-6AB4FD2428D4", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_basic_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "80D166A8-1EEC-42F4-8EAB-1747247A7A05", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_basic:-:*:*:*:*:*:*:*", matchCriteriaId: "FFA520B6-5177-43E4-87C0-C215F79FE9B4", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_advanced_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "C8E76BDE-C7E9-4D6B-B5D9-A456516CD016", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_advanced_modem:-:*:*:*:*:*:*:*", matchCriteriaId: "BF513598-C3FA-4555-8133-A7276DDAFAC8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sitop_psu8600_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5468C9FA-ADD9-4FD3-89FE-C3621F5CB0EC", versionEndExcluding: "1.2.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sitop_psu8600:-:*:*:*:*:*:*:*", matchCriteriaId: "55058209-8AE5-42AF-80D4-5A7A44307266", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:ups1600_profinet_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "54B85DBA-24CA-4F95-89A5-D53D5AC69B0E", versionEndExcluding: "2.2.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:ups1600_profinet:-:*:*:*:*:*:*:*", matchCriteriaId: "ECC84D6F-F5E0-47CF-B11E-1C43F866D972", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200al_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0C9D0595-53CD-48C0-82E3-DB0B2EC17721", versionEndExcluding: "1.0.2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200al:-:*:*:*:*:*:*:*", matchCriteriaId: "34C17B00-34B5-4A15-9333-252BE2975F37", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200ecopn_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3EE0B998-E408-408F-8F78-5E90F74E9C9B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200ecopn:-:*:*:*:*:*:*:*", matchCriteriaId: "0259EAE9-0CA0-49A5-A573-8339604A181B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200m_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "14E56570-5C20-40BD-BF0B-F6ED06AFC8F7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200m:-:*:*:*:*:*:*:*", matchCriteriaId: "7037E46B-4FE5-4693-B6A6-B5AF7B652C4F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200mp_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "55BE63B0-F44E-4FCD-B00C-77595BACC62E", versionEndExcluding: "4.0.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200mp:-:*:*:*:*:*:*:*", matchCriteriaId: "49DA8715-D671-4D8F-A870-E61960A5AFA4", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200pro_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D054139B-BE36-4B34-88AE-BC487DCB1DCB", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200pro:-:*:*:*:*:*:*:*", matchCriteriaId: "3F0CE2EC-9A73-4576-A389-A19893D47B0F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200s_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BB063929-AAB0-4FF8-BCA3-71BA80517B1A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200s:-:*:*:*:*:*:*:*", matchCriteriaId: "A1EC40E7-F004-446C-B5C9-0AB9911105E0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200sp_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E6BACBC9-7C60-4A41-B8C6-A5E46B568029", versionEndExcluding: "4.1.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200sp:-:*:*:*:*:*:*:*", matchCriteriaId: "691CA334-4394-4ED6-B417-F67FC92228AE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:pn\\/pn_coupler_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "32BD232D-A6BB-4D7B-BD00-1085D08D8A77", versionEndExcluding: "4.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:pn\\/pn_coupler:-:*:*:*:*:*:*:*", matchCriteriaId: "CB2846BD-9DAB-44A2-87C9-39E3ACFE03FA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0FE40195-DE5A-4B9C-9455-FAF92FF090D0", versionEndExcluding: "4.1.1", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:-:*:*:*:*:*:*", matchCriteriaId: "9B339839-3D74-4E13-9EB6-24CA46F991A5", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:dk_standard_ethernet_controller:-:*:*:*:*:*:*:*", matchCriteriaId: "53DF35F1-94FF-4D0B-9FA2-E8B0AFAEA5FF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:ek-ertec_200p_pn_io_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E9329BF4-D00A-4138-AA4C-93022002C0B9", versionEndExcluding: "4.4.0", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:ek-ertec_200p_pn_io_firmware:4.4.0:-:*:*:*:*:*:*", matchCriteriaId: "7863DDDC-D5CE-44FE-89C4-0E8A702A91A8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:ek-ertec_200p_pn_io:-:*:*:*:*:*:*:*", matchCriteriaId: "E62802E3-AFA3-4023-9671-95C220397956", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:ek-ertec_200_pn_io_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8C46E084-9732-4920-86C2-3A91830CBCE3", versionEndExcluding: "4.2.1", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:ek-ertec_200_pn_io_firmware:4.2.1:-:*:*:*:*:*:*", matchCriteriaId: "18C8B2FB-87C3-4DBB-9960-53FA545F26CB", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:ek-ertec_200_pn_io:-:*:*:*:*:*:*:*", matchCriteriaId: "42D3FAF4-9B78-4EEF-8D80-17E9B98228D2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-200_smart_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "251EE4B2-F1C7-4ACF-B90D-4C0FE3D181E5", versionEndExcluding: "2.3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-200_smart:-:*:*:*:*:*:*:*", matchCriteriaId: "598EEFC9-5240-4011-9017-A9557585AA19", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "4C096137-C1E3-4D19-87A9-BEB7A081DD1E", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300:-:*:*:*:*:*:*:*", matchCriteriaId: "7EFD4E99-5C66-443F-8B6F-FA01C895DE78", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-400_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2570E321-C28E-46FA-8693-1230B3B5FD1B", versionEndExcluding: "6.0.6", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-400:-:*:*:*:*:*:*:*", matchCriteriaId: "8F97B67B-4516-4AD9-B33C-7F480EE0DB4D", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1200_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "582B49BD-4565-4D19-BBE6-A193BDFCE8B0", versionEndExcluding: "4.2.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1200:-:*:*:*:*:*:*:*", matchCriteriaId: "EC545350-FD53-4B2E-886F-E20F12260C9B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "9D24953B-B3DF-4150-810C-64A94A55E829", versionEndExcluding: "2.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*", matchCriteriaId: "30DDEA9B-E1BF-4572-8E12-D13C54603E77", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1500_software_controller_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E696D071-8601-40AA-BAF5-1452940E1D6E", versionEndExcluding: "2.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1500_software_controller:-:*:*:*:*:*:*:*", matchCriteriaId: "FE4D4D21-9868-4FA3-89A8-1EEC473383EF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_winac_rtx_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "80BDBB38-20D2-48C3-8B58-62C2D8CC00B8", versionEndExcluding: "2010", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:simatic_winac_rtx_firmware:2010:-:*:*:*:*:*:*", matchCriteriaId: "EA59D713-F342-4CDA-BDC8-108352D385DA", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_winac_rtx:-:*:*:*:*:*:*:*", matchCriteriaId: "CA5ADAB0-3985-4933-8CDD-D1546D8271CC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sirius_act_3su1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4E36412A-1AAB-42D1-B0B4-7A7BBF3CB317", versionEndExcluding: "1.1.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sirius_act_3su1:-:*:*:*:*:*:*:*", matchCriteriaId: "8582A3E8-C05E-4D0B-851D-8C3181ED61CC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sirius_soft_starter_3rw44_pn_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F84A65E6-4672-4B62-826E-6FAAE0B4A89D", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sirius_soft_starter_3rw44_pn:-:*:*:*:*:*:*:*", matchCriteriaId: "CBB058FA-3E70-4489-AAB1-0CB7EF16A2E7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sirius_motor_starter_m200d_profinet_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3D42184E-8998-4C40-9612-5C9DE193CC06", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sirius_motor_starter_m200d_profinet:-:*:*:*:*:*:*:*", matchCriteriaId: "BA5CB62E-04B7-4DD3-AA06-EB4A4FA58E54", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simocode_pro_v_profinet_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "98FDB53A-8F5D-46AA-9366-F6480B12D744", versionEndExcluding: "2.0.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simocode_pro_v_profinet:-:*:*:*:*:*:*:*", matchCriteriaId: "352651A0-F7CE-4689-8597-15F3764707A9", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_dcm_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FD2943F3-C46C-462E-9062-EE7B3E56CF72", versionEndExcluding: "1.4", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_dcm_firmware:1.4:-:*:*:*:*:*:*", matchCriteriaId: "975EFBBB-33E1-4D04-9E06-93553D45539C", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_dcm_firmware:1.4:sp1:*:*:*:*:*:*", matchCriteriaId: "99A0D811-2751-420E-AD85-B6EC777C8CAE", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_dcm:-:*:*:*:*:*:*:*", matchCriteriaId: "A1A43D34-ECA3-4330-B85F-02BDD1D22149", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_dcp_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5D7A7140-62A2-434F-AB79-1D47C918F1FE", versionEndExcluding: "1.2", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_dcp_firmware:1.2:-:*:*:*:*:*:*", matchCriteriaId: "A2B61A79-C2B0-4C3D-A63C-B20FF78B2981", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:*", matchCriteriaId: "B75F50CA-7371-4BC7-8D8A-13F8BC69E4EB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g110m_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "775C90BB-C026-435C-889A-517EF85656C5", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_g110m_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "CAA92AC6-7DA0-418D-A13F-69268DFD7966", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g110m:-:*:*:*:*:*:*:*", matchCriteriaId: "D61D3E9C-1346-4354-BCD9-B02F67500C41", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g120\\(c\\/p\\/d\\)_w._pn_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "413AA7BE-CFE1-49DB-965F-1BD50D61F82F", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_g120\\(c\\/p\\/d\\)_w._pn_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "82B4BE4B-3AE5-4039-B18D-A5DE3F1DDEF8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g120\\(c\\/p\\/d\\)_w._pn:-:*:*:*:*:*:*:*", matchCriteriaId: "0EE820D5-16B2-4565-9D83-AF018C08B5E5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g130_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4B3B0706-47CD-43FB-8E3A-7EEEF020AFBA", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_g130_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "1D36CF8D-6DA4-49ED-9EF1-F96292F671EE", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:*", matchCriteriaId: "373DBE44-AC28-4D04-93BB-35CD8C60E899", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "AC731378-CB83-4C15-BC6A-5A86DF9B62F1", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_g150_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "51A78A0B-5D75-418A-98AC-6EBF50D89A8A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:*", matchCriteriaId: "2296CA65-0E89-4BCB-8003-E7212BF1F585", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics__s110_pn_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7143613F-4627-4F62-8F1B-E64CCB20F3D1", versionEndExcluding: "4.4", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics__s110_pn_firmware:4.4:-:*:*:*:*:*:*", matchCriteriaId: "B428560B-2CAC-4A63-B677-724D95E12023", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:_s110_pn:-:*:*:*:*:*:*:*", matchCriteriaId: "23B97849-01A7-4A8F-84DD-D25CF84D010B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s120_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "77A0BE57-1A9A-4564-9C53-CF47DEEF7991", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_s120_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "376556D0-1AE2-4F80-B3CE-C0251E35C326", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*", matchCriteriaId: "E5A824BD-935F-4E53-8313-C5544B0489C7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "772FF972-2193-4639-B454-F92762E49C39", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_s150_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "EE2B31F0-D45F-4B42-95D2-540C68C5F3DE", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:*", matchCriteriaId: "0D48682C-A39D-4A09-B904-50FA64A9D2A5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_v90_pn_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8EE54303-4FDA-42C7-B33B-BA884CD31339", versionEndExcluding: "1.01", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_v90_pn:-:*:*:*:*:*:*:*", matchCriteriaId: "D870F289-F2BC-4105-A8F0-30E47CDE9FEF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simotion_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "92A7198A-D6C5-4FBF-8860-5C8EA864718B", versionEndExcluding: "4.5", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:simotion_firmware:4.5:-:*:*:*:*:*:*", matchCriteriaId: "B5DA6BF7-ECB8-47F1-A791-E65CFF89A608", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simotion:-:*:*:*:*:*:*:*", matchCriteriaId: "879CF09E-4735-4A73-8E7B-215F2701F7E0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinumerik_828d_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "71CD07D8-ECED-47EF-B2BC-0585F9BB00C1", versionEndExcluding: "4.5", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinumerik_828d_firmware:4.5:-:*:*:*:*:*:*", matchCriteriaId: "AEB948AA-7BD7-4A0F-B86E-38ECD722C086", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinumerik_828d:-:*:*:*:*:*:*:*", matchCriteriaId: "7D97047C-9772-4AEB-B993-131EBBAE33BA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "28E3AB24-86B4-485D-8D3A-131E5C7F0108", versionEndExcluding: "4.5", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:4.5:-:*:*:*:*:*:*", matchCriteriaId: "40AC387B-B799-4A34-8C9E-73D05B86801D", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinumerik_840d_sl:-:*:*:*:*:*:*:*", matchCriteriaId: "765286DF-07EC-4C7A-AB8C-09559CD977EA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_comfort_panels:*:*:*:*:*:*:*:*", matchCriteriaId: "CE53BC8E-CDA7-476A-87CA-532F365C79A7", versionEndExcluding: "15.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_comfort_panels:-:*:*:*:*:*:*:*", matchCriteriaId: "3BCFE761-35C9-43EF-85BC-E8083B9F75CB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_multi_panels:*:*:*:*:*:*:*:*", matchCriteriaId: "A1150AED-CDBE-492C-95FF-3E02B3B447F1", versionEndExcluding: "15.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_multi_panels:-:*:*:*:*:*:*:*", matchCriteriaId: "1AAE6A83-737B-47A9-86BB-652C7F6A8013", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_mobile_panels:*:*:*:*:*:*:*:*", matchCriteriaId: "42E8D21B-9CF4-4C2E-B33C-212BA29C7124", versionEndExcluding: "15.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_mobile_panels:-:*:*:*:*:*:*:*", matchCriteriaId: "55E03180-BE77-4A22-A6C1-FE90B9760570", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1243-1_irc_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "02610368-4B97-4B3F-8592-64CF8F65D8AD", versionEndExcluding: "2.1.82", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1243-1_irc:-:*:*:*:*:*:*:*", matchCriteriaId: "61E7964A-E7A4-4CDE-B376-5BBEC5F00A73", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BE5003DA-5488-47C1-B442-9137E849FDD5", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:*", matchCriteriaId: "DFE96226-A2DF-4A9E-8CBB-8D7CF328E404", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FCF9D803-FF47-4400-B2C4-1F4EE28E5AA8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:*", matchCriteriaId: "2FFBFB96-1A35-4724-831B-68E3A9C32921", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_dk-1604_pn_io_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "65EDC583-1BCE-4787-820F-39DBD280DADF", versionEndExcluding: "2.7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_dk-1604_pn_io:-:*:*:*:*:*:*:*", matchCriteriaId: "568ED124-AEE8-4BDC-BB89-0F8F83BA7537", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_tdc_cpu555_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D87643C3-6525-4CBD-BC0C-6B4DC30C8642", versionEndExcluding: "1.1.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_tdc_cpu555:-:*:*:*:*:*:*:*", matchCriteriaId: "AE6AB995-D67B-43E5-B8FF-97C38D20CB10", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_tdc_cp51m1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5C936A7A-1AF9-44E4-9CEC-0694A424616B", versionEndExcluding: "1.1.8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_tdc_cp51m1:-:*:*:*:*:*:*:*", matchCriteriaId: "8DA1E7C4-6352-41A4-8A94-C24DDB456572", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_gh150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D3F052D2-B537-4BF9-AF05-60107FDE0BEA", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_gh150_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "96C7E194-617D-4593-B544-10AEFF59CCA5", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_gh150:-:*:*:*:*:*:*:*", matchCriteriaId: "BF977545-395A-4C34-BB22-A1047B5B6E85", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_gl150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3653DA37-DB23-41E0-8CE8-838E384AA40A", versionEndExcluding: "4.8", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_gl150_firmware:4.8:-:*:*:*:*:*:*", matchCriteriaId: "0F86A334-10F9-4DFB-A421-CBCAFD86C8C2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_gl150:-:*:*:*:*:*:*:*", matchCriteriaId: "DED7F33B-D475-4232-8683-48554A6729F7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_gm150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "1BF93390-E65B-434E-9891-271DF7D11F47", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_gm150_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "55F6B737-7237-4D38-A0F0-9EFCE76DC9C4", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_gm150:-:*:*:*:*:*:*:*", matchCriteriaId: "DD76CFB0-B5D7-40DC-8D14-FC9C9BACF3CD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_sl150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FD67D30A-8681-41AE-B248-7E50BA1B9FC8", versionEndExcluding: "4.8", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_sl150_firmware:4.8:-:*:*:*:*:*:*", matchCriteriaId: "FCC0EE8B-1088-46B6-992A-B8E12A7B7DC2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_sl150:-:*:*:*:*:*:*:*", matchCriteriaId: "C6619B0F-7CDC-40A6-89B2-C6067AF45214", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_sm120_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "31393A1B-4DBC-476D-875E-463B4B887E1B", versionEndExcluding: "4.8", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_sm120_firmware:4.8:-:*:*:*:*:*:*", matchCriteriaId: "0206F9F2-27C7-4D2F-817B-13F8FA31E547", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_sm120:-:*:*:*:*:*:*:*", matchCriteriaId: "444DD77F-DB65-4766-A89D-7A679B4CA1E1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:extension_unit_12_profinet_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E789146F-1FA4-42E4-B867-FD0F5A7316CA", versionEndExcluding: "01.01.01", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:extension_unit_12_profinet:-:*:*:*:*:*:*:*", matchCriteriaId: "1E0B32CC-8268-4B38-BBC7-51154882EC82", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:extension_unit_15_profinet_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "05B55989-A3E9-4AA1-A619-C75FEAA0B5DA", versionEndExcluding: "01.01.01", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:extension_unit_15_profinet:-:*:*:*:*:*:*:*", matchCriteriaId: "DA05435D-9A52-4D43-BE74-7D4C6C156AC6", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:extension_unit_19_profinet_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "52156691-1368-4C77-98A7-EA63089091C5", versionEndExcluding: "01.01.01", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:extension_unit_19_profinet:-:*:*:*:*:*:*:*", matchCriteriaId: "5EE8B9B8-3C49-4296-9BC0-7E030878D479", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:extension_unit_22_profinet_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "EC052323-2E00-415D-847A-66F77AD5C3FD", versionEndExcluding: "01.01.01", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:extension_unit_22_profinet:-:*:*:*:*:*:*:*", matchCriteriaId: "8F884CAF-D152-4318-B49B-0D68936D2BD9", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1242-7_gprs_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F4E035CB-0F76-47C0-B2C7-93AFA8A7B38B", versionEndExcluding: "2.1.82", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1242-7_gprs:-:*:*:*:*:*:*:*", matchCriteriaId: "C6AEC7D6-7E5E-4CFF-99C8-7FBADA2479D5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1243-7_lte\\/us_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E4CEE93A-9641-424B-AF55-2C550CA568F2", versionEndExcluding: "2.1.82", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1243-7_lte\\/us:-:*:*:*:*:*:*:*", matchCriteriaId: "00DDA679-D761-4986-A0A0-4C00178DF0B5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1243-8_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7D21A891-321B-42A3-8173-8E0743AEDD65", versionEndExcluding: "2.1.82", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1243-8:-:*:*:*:*:*:*:*", matchCriteriaId: "EE0116F3-67FA-4129-B1FF-023774D179AF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp_1626_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "71BAF32C-35EA-4704-B75D-9EED01F8264B", versionEndExcluding: "1.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp_1626:-:*:*:*:*:*:*:*", matchCriteriaId: "581EA284-EDD6-4EA5-96B2-67904D1D9DC7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.", }, { lang: "es", value: "Los paquetes de difusión PROFINET DCP especialmente elaborados podrían causar una condición de denegación de servicio de los productos afectados en un segmento Ethernet local (capa 2). Se requiere la interacción humana para recuperar los sistemas. Las interfaces PROFIBUS no están afectadas", }, ], id: "CVE-2017-2680", lastModified: "2024-11-21T03:23:57.563", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "LOW", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "COMPLETE", baseScore: 6.1, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:L/Au:N/C:N/I:N/A:C", version: "2.0", }, exploitabilityScore: 6.5, impactScore: 6.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "ADJACENT_NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 2.8, impactScore: 3.6, source: "productcert@siemens.com", type: "Secondary", }, { cvssData: { attackComplexity: "LOW", attackVector: "ADJACENT_NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 2.8, impactScore: 3.6, source: "nvd@nist.gov", type: "Primary", }, ], cvssMetricV40: [ { cvssData: { Automatable: "NOT_DEFINED", Recovery: "NOT_DEFINED", Safety: "NOT_DEFINED", attackComplexity: "LOW", attackRequirements: "NONE", attackVector: "ADJACENT", availabilityRequirement: "NOT_DEFINED", baseScore: 7.1, baseSeverity: "HIGH", confidentialityRequirement: "NOT_DEFINED", exploitMaturity: "NOT_DEFINED", integrityRequirement: "NOT_DEFINED", modifiedAttackComplexity: "NOT_DEFINED", modifiedAttackRequirements: "NOT_DEFINED", modifiedAttackVector: "NOT_DEFINED", modifiedPrivilegesRequired: "NOT_DEFINED", modifiedSubAvailabilityImpact: "NOT_DEFINED", modifiedSubConfidentialityImpact: "NOT_DEFINED", modifiedSubIntegrityImpact: "NOT_DEFINED", modifiedUserInteraction: "NOT_DEFINED", modifiedVulnAvailabilityImpact: "NOT_DEFINED", modifiedVulnConfidentialityImpact: "NOT_DEFINED", modifiedVulnIntegrityImpact: "NOT_DEFINED", privilegesRequired: "NONE", providerUrgency: "NOT_DEFINED", subAvailabilityImpact: "NONE", subConfidentialityImpact: "NONE", subIntegrityImpact: "NONE", userInteraction: "NONE", valueDensity: "NOT_DEFINED", vectorString: "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", version: "4.0", vulnAvailabilityImpact: "HIGH", vulnConfidentialityImpact: "NONE", vulnIntegrityImpact: "NONE", vulnerabilityResponseEffort: "NOT_DEFINED", }, source: "productcert@siemens.com", type: "Secondary", }, ], }, published: "2017-05-11T01:29:05.400", references: [ { source: "productcert@siemens.com", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/98369", }, { source: "productcert@siemens.com", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1038463", }, { source: "productcert@siemens.com", url: "https://cert-portal.siemens.com/productcert/html/ssa-284673.html", }, { source: "productcert@siemens.com", url: "https://cert-portal.siemens.com/productcert/html/ssa-293562.html", }, { source: "productcert@siemens.com", url: "https://cert-portal.siemens.com/productcert/html/ssa-546832.html", }, { source: "productcert@siemens.com", tags: [ "Vendor Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf", }, { source: "productcert@siemens.com", tags: [ "Vendor Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf", }, { source: "productcert@siemens.com", tags: [ "Vendor Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf", }, { source: "productcert@siemens.com", tags: [ "Third Party Advisory", "US Government Resource", ], url: "https://ics-cert.us-cert.gov/advisories/ICSA-18-023-02", }, { source: "productcert@siemens.com", tags: [ "Broken Link", ], url: "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/98369", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1038463", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://cert-portal.siemens.com/productcert/html/ssa-284673.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://cert-portal.siemens.com/productcert/html/ssa-293562.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://cert-portal.siemens.com/productcert/html/ssa-546832.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "US Government Resource", ], url: "https://ics-cert.us-cert.gov/advisories/ICSA-18-023-02", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Broken Link", ], url: "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf", }, ], sourceIdentifier: "productcert@siemens.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-400", }, ], source: "productcert@siemens.com", type: "Secondary", }, { description: [ { lang: "en", value: "CWE-400", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2019-10-10 14:15
Modified
2024-11-21 04:20
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
Affected devices improperly handle large amounts of specially crafted UDP packets.
This could allow an unauthenticated remote attacker to trigger a denial of service condition.
References
▼ | URL | Tags | |
---|---|---|---|
productcert@siemens.com | https://cert-portal.siemens.com/productcert/html/ssa-473245.html | ||
productcert@siemens.com | https://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/html/ssa-473245.html | ||
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf | Vendor Advisory |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
siemens | dk_standard_ethernet_controller_firmware | * | |
siemens | dk_standard_ethernet_controller | - | |
siemens | ek-ertec_200_firmware | * | |
siemens | ek-ertec_200 | - | |
siemens | ek-ertec_200p_firmware | * | |
siemens | ek-ertec_200p_firmware | 4.6 | |
siemens | ek-ertec_200p | - | |
siemens | simatic_cfu_pa_firmware | * | |
siemens | simatic_cfu_pa | - | |
siemens | simatic_et_200al_firmware | * | |
siemens | simatic_et_200al | - | |
siemens | simatic_et_200m_firmware | * | |
siemens | simatic_et_200m | - | |
siemens | simatic_et_200mp_im_155-5_pn_ba_firmware | * | |
siemens | simatic_et_200mp_im_155-5_pn_ba | - | |
siemens | simatic_et_200mp_im_155-5_pn_hf_firmware | * | |
siemens | simatic_et_200mp_im_155-5_pn_hf | - | |
siemens | simatic_et_200mp_im_155-5_pn_st_firmware | * | |
siemens | simatic_et_200mp_im_155-5_pn_st | - | |
siemens | simatic_et_200s_firmware | * | |
siemens | simatic_et_200s | - | |
siemens | simatic_et_200sp_im_155-6_pn_ba_firmware | * | |
siemens | simatic_et_200sp_im_155-6_pn_ba | - | |
siemens | simatic_et_200sp_im_155-6_pn_ha_firmware | * | |
siemens | simatic_et_200sp_im_155-6_pn_ha | - | |
siemens | simatic_et_200sp_im_155-6_pn_hf_firmware | * | |
siemens | simatic_et_200sp_im_155-6_pn_hf | - | |
siemens | simatic_et_200sp_im_155-6_pn_hs_firmware | * | |
siemens | simatic_et_200sp_im_155-6_pn_hs | - | |
siemens | simatic_et_200sp_im_155-6_pn_st_firmware | * | |
siemens | simatic_et_200sp_im_155-6_pn_st | - | |
siemens | simatic_et_200sp_im_155-6_pn\/2_hf_firmware | * | |
siemens | simatic_et_200sp_im_155-6_pn\/2_hf | - | |
siemens | simatic_et_200sp_im_155-6_pn\/3_hf_firmware | * | |
siemens | simatic_et_200sp_im_155-6_pn\/3_hf | - | |
siemens | simatic_et_200ecopn_firmware | * | |
siemens | simatic_et_200ecopn | - | |
siemens | simatic_et_200pro_firmware | * | |
siemens | simatic_et_200pro | - | |
siemens | simatic_hmi_comfort_outdoor_panels_7\"_firmware | * | |
siemens | simatic_hmi_comfort_outdoor_panels_7\" | - | |
siemens | simatic_hmi_comfort_outdoor_panels_15\"_firmware | * | |
siemens | simatic_hmi_comfort_outdoor_panels_15\" | - | |
siemens | simatic_hmi_comfort_panels_4\"_firmware | * | |
siemens | simatic_hmi_comfort_panels_4\" | - | |
siemens | simatic_hmi_comfort_panels_22\"_firmware | * | |
siemens | simatic_hmi_comfort_panels_22\" | - | |
siemens | simatic_hmi_ktp_mobile_panels_firmware | * | |
siemens | simatic_hmi_ktp_mobile_panels | - | |
siemens | simatic_pn\/pn_coupler_firmware | * | |
siemens | simatic_pn\/pn_coupler | - | |
siemens | simatic_profinet_driver_firmware | * | |
siemens | simatic_profinet_driver | - | |
siemens | simatic_s7-1200_cpu_firmware | * | |
siemens | simatic_s7-1200_cpu | - | |
siemens | simatic_s7-1200_cpu_1211c_firmware | * | |
siemens | simatic_s7-1200_cpu_1211c | - | |
siemens | simatic_s7-1200_cpu_1212c_firmware | * | |
siemens | simatic_s7-1200_cpu_1212c | - | |
siemens | simatic_s7-1200_cpu_1214c_firmware | * | |
siemens | simatic_s7-1200_cpu_1214c | - | |
siemens | simatic_s7-1500_cpu_firmware | * | |
siemens | simatic_s7-1500_cpu | - | |
siemens | simatic_s7-1500s_cpu_firmware | * | |
siemens | simatic_s7-1500s_cpu | - | |
siemens | simatic_s7-1500t_cpu_firmware | * | |
siemens | simatic_s7-1500t_cpu | - | |
siemens | simatic_s7-1500_cpu_1518_firmware | * | |
siemens | simatic_s7-1500_cpu_1518 | - | |
siemens | simatic_s7-1500_cpu_1511c_firmware | * | |
siemens | simatic_s7-1500_cpu_1511c | - | |
siemens | simatic_s7-1500_cpu_1512c_firmware | * | |
siemens | simatic_s7-1500_cpu_1512c | - | |
siemens | simatic_s7-300_cpu_firmware | * | |
siemens | simatic_s7-300_cpu | - | |
siemens | simatic_s7-300_cpu_312_ifm_firmware | * | |
siemens | simatic_s7-300_cpu_312_ifm | - | |
siemens | simatic_s7-300_cpu_313_firmware | * | |
siemens | simatic_s7-300_cpu_313 | - | |
siemens | simatic_s7-300_cpu_314_firmware | * | |
siemens | simatic_s7-300_cpu_314 | - | |
siemens | simatic_s7-300_cpu_314_ifm_firmware | * | |
siemens | simatic_s7-300_cpu_314_ifm | - | |
siemens | simatic_s7-300_cpu_315_firmware | * | |
siemens | simatic_s7-300_cpu_315 | - | |
siemens | simatic_s7-300_cpu_315-2_dp_firmware | * | |
siemens | simatic_s7-300_cpu_315-2_dp | - | |
siemens | simatic_s7-300_cpu_316-2_dp_firmware | * | |
siemens | simatic_s7-300_cpu_316-2_dp | - | |
siemens | simatic_s7-300_cpu_318-2_firmware | * | |
siemens | simatic_s7-300_cpu_318-2 | - | |
siemens | simatic_s7-400_pn_v7_firmware | * | |
siemens | simatic_s7-400_pn_v7 | - | |
siemens | simatic_s7-400_dp_v7_firmware | * | |
siemens | simatic_s7-400_dp_v7 | - | |
siemens | simatic_s7-400_v6_firmware | * | |
siemens | simatic_s7-400_v6 | - | |
siemens | simatic_s7-400h_v6_firmware | * | |
siemens | simatic_s7-400h_v6 | - | |
siemens | simatic_s7-410_v8_firmware | * | |
siemens | simatic_s7-410_v8 | - | |
siemens | simatic_winac_rtx_\(f\)_firmware | * | |
siemens | simatic_winac_rtx_\(f\)_firmware | 2010 | |
siemens | simatic_winac_rtx_\(f\)_2010 | - | |
siemens | sinamics_dcm_firmware | * | |
siemens | sinamics_dcm_firmware | 1.5 | |
siemens | sinamics_dcm | - | |
siemens | sinamics_dcp_firmware | * | |
siemens | sinamics_dcp | - | |
siemens | sinamics_g110m_firmware | * | |
siemens | sinamics_g110m_firmware | 4.7 | |
siemens | sinamics_g110m | - | |
siemens | sinamics_g120_firmware | * | |
siemens | sinamics_g120_firmware | 4.7 | |
siemens | sinamics_g120 | - | |
siemens | sinamics_g130_firmware | * | |
siemens | sinamics_g130_firmware | 5.2 | |
siemens | sinamics_g130 | - | |
siemens | sinamics_g150_firmware | * | |
siemens | sinamics_g150_firmware | 5.2 | |
siemens | sinamics_g150 | - | |
siemens | sinamics_gl150_firmware | * | |
siemens | sinamics_gl150_firmware | 4.8 | |
siemens | sinamics_gl150 | - | |
siemens | sinamics_gm150_firmware | * | |
siemens | sinamics_gm150_firmware | 4.8 | |
siemens | sinamics_gm150 | - | |
siemens | sinamics_s110_firmware | * | |
siemens | sinamics_s110 | - | |
siemens | sinamics_s120_firmware | * | |
siemens | sinamics_s120_firmware | 5.2 | |
siemens | sinamics_s120 | - | |
siemens | sinamics_s150_firmware | * | |
siemens | sinamics_s150_firmware | 5.2 | |
siemens | sinamics_s150 | - | |
siemens | sinamics_sl150_firmware | * | |
siemens | sinamics_sl150_firmware | 4.7 | |
siemens | sinamics_sl150 | - | |
siemens | sinamics_sm120_firmware | - | |
siemens | sinamics_sm120 | - | |
siemens | sinumerik_828d | * | |
siemens | sinumerik_828d | 4.8 | |
siemens | sinumerik_828d | 4.8 | |
siemens | sinumerik_828d | 4.8 | |
siemens | sinumerik_828d | 4.8 | |
siemens | sinumerik_828d | 4.8 | |
siemens | sinumerik_840d_sl | * |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E19343EA-5ECA-4263-A568-DAEA04425F86", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:dk_standard_ethernet_controller:-:*:*:*:*:*:*:*", matchCriteriaId: "53DF35F1-94FF-4D0B-9FA2-E8B0AFAEA5FF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:ek-ertec_200_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "70D5CDF4-A134-402E-A4E9-4BBA19082397", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:ek-ertec_200:-:*:*:*:*:*:*:*", matchCriteriaId: "B47CF3BB-08E4-4B86-B793-8253C172D846", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:ek-ertec_200p_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2773F4B7-095E-4A33-93F2-765FA58B828C", versionEndExcluding: "4.6", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:ek-ertec_200p_firmware:4.6:-:*:*:*:*:*:*", matchCriteriaId: "9E7753EE-DF23-4838-B3B4-7C43C550519C", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:ek-ertec_200p:-:*:*:*:*:*:*:*", matchCriteriaId: "FB75CD44-5223-40A7-A835-111BF3C25D23", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cfu_pa_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "ABA8C0E5-E6AA-4BF2-925F-0041C382A416", versionEndExcluding: "1.2.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cfu_pa:-:*:*:*:*:*:*:*", matchCriteriaId: "B6C1E4CC-2657-4383-83D8-5C8F88B12755", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200al_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "24E01824-4942-4400-A8C2-43A5772C2968", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200al:-:*:*:*:*:*:*:*", matchCriteriaId: "34C17B00-34B5-4A15-9333-252BE2975F37", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200m_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "14E56570-5C20-40BD-BF0B-F6ED06AFC8F7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200m:-:*:*:*:*:*:*:*", matchCriteriaId: "7037E46B-4FE5-4693-B6A6-B5AF7B652C4F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200mp_im_155-5_pn_ba_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B4458E08-9864-452E-B95E-A46C5600D488", versionEndExcluding: "4.3.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200mp_im_155-5_pn_ba:-:*:*:*:*:*:*:*", matchCriteriaId: "9AF349D2-2560-4C60-8729-4B6CCDC52347", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200mp_im_155-5_pn_hf_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "00743200-D240-4CBC-8652-555F5E89B042", versionEndExcluding: "4.4.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200mp_im_155-5_pn_hf:-:*:*:*:*:*:*:*", matchCriteriaId: "AB9BFB03-D366-4F23-9477-D6133BD021CF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200mp_im_155-5_pn_st_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "ACDF9AF3-DDB9-41A8-90C5-2A95A51D5EDE", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200mp_im_155-5_pn_st:-:*:*:*:*:*:*:*", matchCriteriaId: "4B48C0A4-072A-4744-94A5-FC4741F4A029", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200s_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BB063929-AAB0-4FF8-BCA3-71BA80517B1A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200s:-:*:*:*:*:*:*:*", matchCriteriaId: "A1EC40E7-F004-446C-B5C9-0AB9911105E0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200sp_im_155-6_pn_ba_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8A1327FC-E785-4AA7-BC73-CC61CEED832D", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200sp_im_155-6_pn_ba:-:*:*:*:*:*:*:*", matchCriteriaId: "4C0300D2-1A87-4F61-9444-C1D23E3E6033", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200sp_im_155-6_pn_ha_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "17B7ED41-6AC7-4D34-A94E-61AECFA088EA", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200sp_im_155-6_pn_ha:-:*:*:*:*:*:*:*", matchCriteriaId: "34131306-1591-42B3-B235-4265F918CBDA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200sp_im_155-6_pn_hf_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "67DAE64A-6E78-452E-9812-242769378ED8", versionEndExcluding: "4.2.2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200sp_im_155-6_pn_hf:-:*:*:*:*:*:*:*", matchCriteriaId: "527AE806-5C00-4C44-940F-88032AD8120D", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200sp_im_155-6_pn_hs_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "AAAA8667-C792-45E4-AE5E-C194B5B76366", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200sp_im_155-6_pn_hs:-:*:*:*:*:*:*:*", matchCriteriaId: "455EC7E5-236B-43E6-86E7-702FAFCCCB15", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200sp_im_155-6_pn_st_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "918CBE10-D912-446B-B8B3-843B0089CB7A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200sp_im_155-6_pn_st:-:*:*:*:*:*:*:*", matchCriteriaId: "1DB6FAE7-8598-4673-83A9-7A838BB207C5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200sp_im_155-6_pn\\/2_hf_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6269D1CC-FF57-409F-8284-C95FF4DCEF25", versionEndExcluding: "4.2.2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200sp_im_155-6_pn\\/2_hf:-:*:*:*:*:*:*:*", matchCriteriaId: "2CBAACFE-CD21-4FAC-9262-1A7F325D6E40", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200sp_im_155-6_pn\\/3_hf_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3FA7253F-17B9-411B-B4C9-FE51DF0DE44D", versionEndExcluding: "4.2.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200sp_im_155-6_pn\\/3_hf:-:*:*:*:*:*:*:*", matchCriteriaId: "DCCAFEF7-CA0C-4F20-B98E-DBB8365F1CCF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200ecopn_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3EE0B998-E408-408F-8F78-5E90F74E9C9B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200ecopn:-:*:*:*:*:*:*:*", matchCriteriaId: "0259EAE9-0CA0-49A5-A573-8339604A181B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200pro_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D054139B-BE36-4B34-88AE-BC487DCB1DCB", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200pro:-:*:*:*:*:*:*:*", matchCriteriaId: "3F0CE2EC-9A73-4576-A389-A19893D47B0F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7\\\"_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5F14E991-8DF6-4221-A9BF-E13EEF211220", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_comfort_outdoor_panels_7\\\":-:*:*:*:*:*:*:*", matchCriteriaId: "B531FDD4-2796-4FE9-9F94-E9D461C7C528", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15\\\"_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "CE84D161-BA23-422A-8959-CF047834A631", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_comfort_outdoor_panels_15\\\":-:*:*:*:*:*:*:*", matchCriteriaId: "39DA22F7-E4B6-4A1E-9CCB-651EBEFD691D", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4\\\"_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E6230347-9AAE-424F-A46F-4A714BA0823D", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_comfort_panels_4\\\":-:*:*:*:*:*:*:*", matchCriteriaId: "D63658BB-2364-4DE5-904B-2367B70294AC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22\\\"_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4A1A44BC-15CC-4CC1-A9D0-4B04233B80CE", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_comfort_panels_22\\\":-:*:*:*:*:*:*:*", matchCriteriaId: "DFDC8157-7EA3-4BC4-82C1-06A307996F45", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "54EFA8B5-8DA1-4547-9E15-BDC265C56006", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels:-:*:*:*:*:*:*:*", matchCriteriaId: "B1CEB200-E38F-4629-9279-5AF065396678", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_pn\\/pn_coupler_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "87B14F05-4D54-420F-8393-4AB27EF6A7D1", versionEndExcluding: "4.2.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_pn\\/pn_coupler:-:*:*:*:*:*:*:*", matchCriteriaId: "49FB85F8-7D45-433E-805B-360725F2980C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_profinet_driver_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "05248152-94EB-4978-98A7-B1A393CA1F03", versionEndExcluding: "2.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_profinet_driver:-:*:*:*:*:*:*:*", matchCriteriaId: "526493E9-EF74-4836-9A8F-134B625035AA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1200_cpu_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2BA63AED-84E4-4F92-A4D4-0713E7F65C4A", versionEndExcluding: "4.4.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1200_cpu:-:*:*:*:*:*:*:*", matchCriteriaId: "F2B63726-10CE-46AB-ADBA-A511E770E162", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1200_cpu_1211c_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4D81B519-6FE9-405C-8BB1-57D14AF531E5", versionEndExcluding: "4.4.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1200_cpu_1211c:-:*:*:*:*:*:*:*", matchCriteriaId: "3871C0C9-C65E-4E0B-9CA8-75E60066297F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1200_cpu_1212c_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "84E0444D-01E0-4F7A-81A0-314C0F7FA623", versionEndExcluding: "4.4.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1200_cpu_1212c:-:*:*:*:*:*:*:*", matchCriteriaId: "07849777-92E7-41D2-9128-F8D20DE15391", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1200_cpu_1214c_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B980BB8C-9AFE-45E4-A4D4-AB555B234059", versionEndExcluding: "4.4.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214c:-:*:*:*:*:*:*:*", matchCriteriaId: "FE17584A-BF7A-48B8-A9CB-477663766C63", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BD6FB801-AE4C-4EDF-96CC-33A4CD51165A", versionEndExcluding: "2.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1500_cpu:-:*:*:*:*:*:*:*", matchCriteriaId: "01048F7F-9C5B-47C0-AE16-321FCA670F3D", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1500s_cpu_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D5DE5B3D-13B1-4684-8859-C3FB34FE50CF", versionEndExcluding: "2.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1500s_cpu:-:*:*:*:*:*:*:*", matchCriteriaId: "B82EADBC-AECE-45B4-AF95-6F0D84966E67", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1500t_cpu_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "EF5E4914-A5EA-451C-9FAF-751B74B8BC69", versionEndExcluding: "2.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1500t_cpu:-:*:*:*:*:*:*:*", matchCriteriaId: "4BE2F683-2A24-4152-9A07-00B0117C5F12", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7B6777DC-80B5-4B36-B9AA-DA764C8016F7", versionEndExcluding: "2.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518:-:*:*:*:*:*:*:*", matchCriteriaId: "BE0BA68C-EB57-49CE-94A8-E7905AB79824", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511c_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "55490E3D-616D-4D21-BAC2-29A51CB067E9", versionEndExcluding: "2.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511c:-:*:*:*:*:*:*:*", matchCriteriaId: "822894D4-96D5-4BDC-A698-D31262BCF422", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512c_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "45303F50-046B-4621-AC6D-2B6E17D948C3", versionEndExcluding: "2.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512c:-:*:*:*:*:*:*:*", matchCriteriaId: "D2E24A4C-AC13-4382-BDF6-E13878FED4DC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "C87674A8-B518-4910-B03D-FFF4D5A7B627", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu:-:*:*:*:*:*:*:*", matchCriteriaId: "602FB384-0DB2-488C-B3CC-96E3A2882976", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_312_ifm_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7B0C6327-7BF6-4B96-82A8-D750007869EE", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu_312_ifm:-:*:*:*:*:*:*:*", matchCriteriaId: "CCFCAA2B-71FE-4DB4-B8B0-F5FD1254C331", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_313_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3EF9F3FB-FBBA-42A8-9A90-FE34703274B5", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu_313:-:*:*:*:*:*:*:*", matchCriteriaId: "4E6E900F-63C1-4E50-9DCD-26CE760E5275", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_314_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8F2F0659-CD37-4AA9-B7D5-44639515533C", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu_314:-:*:*:*:*:*:*:*", matchCriteriaId: "78399465-EED5-4EBD-A2E1-6FE0BD01EDB4", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_314_ifm_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "07AD63B6-B05C-4BBF-812D-379C4D8F8CC7", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu_314_ifm:-:*:*:*:*:*:*:*", matchCriteriaId: "8BE7963C-7AFF-495B-9F0B-28FB393443FD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_315_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7F2A0C75-E360-4E3D-85DA-878E39054E26", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu_315:-:*:*:*:*:*:*:*", matchCriteriaId: "E3962681-E32E-4BD1-8C71-8768248691D4", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_315-2_dp_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "488F0774-43DA-455D-905C-C514A0192260", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu_315-2_dp:-:*:*:*:*:*:*:*", matchCriteriaId: "E8FD8E6D-0527-4215-B6F0-5824011433FB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_316-2_dp_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F103C351-99C9-4F7D-B69A-D8A876F57504", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu_316-2_dp:-:*:*:*:*:*:*:*", matchCriteriaId: "644AD6A8-AEDE-4F1C-92F8-836877A81310", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_cpu_318-2_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BA99549B-5E95-445A-A95B-1CDA7014686B", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300_cpu_318-2:-:*:*:*:*:*:*:*", matchCriteriaId: "FF58C652-E74D-4B57-A7C5-08D7446863D5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-400_pn_v7_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "1B6B9D8B-D7BA-4D72-97C7-7BBEB49802F7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-400_pn_v7:-:*:*:*:*:*:*:*", matchCriteriaId: "E4F8215E-E737-4CD5-B7D9-57FE4A2A2FE5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-400_dp_v7_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "72F7B870-35A1-4900-8104-1303F291E29A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-400_dp_v7:-:*:*:*:*:*:*:*", matchCriteriaId: "ABE9F7D2-22C7-4E7C-99C3-4A88CDD2CDB7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-400_v6_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7A4C79A5-96BB-4ADB-B28A-C9C48B195F49", versionEndExcluding: "6.0.9", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-400_v6:-:*:*:*:*:*:*:*", matchCriteriaId: "A6445275-2AEF-4285-BE7A-67F20182481C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-400h_v6_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "EE93A33C-7007-4908-868A-4FBE4D073E57", versionEndExcluding: "6.0.9", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-400h_v6:-:*:*:*:*:*:*:*", matchCriteriaId: "1D082EB6-3C13-40C1-9949-179DC59037C1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-410_v8_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "63EA1886-A72E-48A7-B99F-C236BF6992FA", versionEndExcluding: "8.2.2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-410_v8:-:*:*:*:*:*:*:*", matchCriteriaId: "926D9DCF-A7EA-416A-9A07-122D1FCA027B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "9D03BD73-51ED-42E0-A552-C32BB7A935B2", versionEndExcluding: "2010", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_firmware:2010:-:*:*:*:*:*:*", matchCriteriaId: "7151A19C-0AE5-4F66-9E3D-8BF675A8430C", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_winac_rtx_\\(f\\)_2010:-:*:*:*:*:*:*:*", matchCriteriaId: "E6034789-ABD1-4035-8378-F0BA7157B087", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_dcm_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "84B1F9B1-4248-4A4C-A8BB-77475A0E9B9B", versionEndExcluding: "1.5", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_dcm_firmware:1.5:-:*:*:*:*:*:*", matchCriteriaId: "F2F99FFB-C312-4080-9580-84AFB7C9FA09", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_dcm:-:*:*:*:*:*:*:*", matchCriteriaId: "A1A43D34-ECA3-4330-B85F-02BDD1D22149", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_dcp_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "83803F1C-4842-43BB-B903-C2E91FF7DC08", versionEndExcluding: "1.3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:*", matchCriteriaId: "B75F50CA-7371-4BC7-8D8A-13F8BC69E4EB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g110m_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "775C90BB-C026-435C-889A-517EF85656C5", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_g110m_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "CAA92AC6-7DA0-418D-A13F-69268DFD7966", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g110m:-:*:*:*:*:*:*:*", matchCriteriaId: "D61D3E9C-1346-4354-BCD9-B02F67500C41", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g120_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B1DBCA1A-27F3-4E9A-9F89-65E82A68DE4A", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_g120_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "94CB2F3E-AAA1-4472-BFD4-4E6E1B663FF5", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g120:-:*:*:*:*:*:*:*", matchCriteriaId: "61A60DCE-384B-43A4-A669-973FB8ECA932", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g130_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "856768D2-C096-4CA7-B26F-E94B005C0D79", versionEndExcluding: "5.2", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_g130_firmware:5.2:-:*:*:*:*:*:*", matchCriteriaId: "AD0515D7-829B-4591-95D9-94C3982FD727", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:*", matchCriteriaId: "373DBE44-AC28-4D04-93BB-35CD8C60E899", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "C579C2C7-0402-46B2-A770-C3B7F71D1096", versionEndExcluding: "5.2", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_g150_firmware:5.2:-:*:*:*:*:*:*", matchCriteriaId: "255A153A-A6A0-46A4-A7CF-01D0D09761C7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:*", matchCriteriaId: "2296CA65-0E89-4BCB-8003-E7212BF1F585", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_gl150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3653DA37-DB23-41E0-8CE8-838E384AA40A", versionEndExcluding: "4.8", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_gl150_firmware:4.8:-:*:*:*:*:*:*", matchCriteriaId: "0F86A334-10F9-4DFB-A421-CBCAFD86C8C2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_gl150:-:*:*:*:*:*:*:*", matchCriteriaId: "DED7F33B-D475-4232-8683-48554A6729F7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_gm150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0E25804D-D943-4C2A-9C78-AAC61F7BA4FF", versionEndExcluding: "4.8", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_gm150_firmware:4.8:-:*:*:*:*:*:*", matchCriteriaId: "06B69CD4-3AEC-4014-81DB-33805A44A5D3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_gm150:-:*:*:*:*:*:*:*", matchCriteriaId: "DD76CFB0-B5D7-40DC-8D14-FC9C9BACF3CD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s110_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "243FFEA3-7193-45EA-B865-E9CA1D6656FE", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s110:-:*:*:*:*:*:*:*", matchCriteriaId: "6218802E-D3B1-4197-A6B5-7343A50F7D88", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s120_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "03F9CBC3-B2B3-4FA7-963D-A8F3AE6D8EA0", versionEndExcluding: "5.2", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_s120_firmware:5.2:-:*:*:*:*:*:*", matchCriteriaId: "6622AE2E-81B0-419C-8C37-A7C56FB92745", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*", matchCriteriaId: "E5A824BD-935F-4E53-8313-C5544B0489C7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6BF989EE-CD8D-450D-90F6-FD15F00B59B9", versionEndExcluding: "5.2", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_s150_firmware:5.2:-:*:*:*:*:*:*", matchCriteriaId: "EFFDE2CB-684D-4ECE-A104-F355254A46B9", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:*", matchCriteriaId: "0D48682C-A39D-4A09-B904-50FA64A9D2A5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_sl150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "30E52510-9306-42B8-A517-A6BBD34B8B9D", versionEndExcluding: "4.7", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_sl150_firmware:4.7:-:*:*:*:*:*:*", matchCriteriaId: "58A71910-E54F-426B-BAB1-260AEFD8EF6E", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_sl150:-:*:*:*:*:*:*:*", matchCriteriaId: "C6619B0F-7CDC-40A6-89B2-C6067AF45214", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_sm120_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "28DB0BC6-E60A-4798-80DC-125EF25B3A40", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_sm120:-:*:*:*:*:*:*:*", matchCriteriaId: "444DD77F-DB65-4766-A89D-7A679B4CA1E1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:siemens:sinumerik_828d:*:*:*:*:*:*:*:*", matchCriteriaId: "328F0192-B34D-481C-8964-226317439966", versionEndExcluding: "4.8", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:sinumerik_828d:4.8:-:*:*:*:*:*:*", matchCriteriaId: "C7936CF6-DC07-4550-9FEC-823A2F49096D", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:sinumerik_828d:4.8:sp1:*:*:*:*:*:*", matchCriteriaId: "BEE7D914-F2DE-4D8C-BFB2-7AD16650CD3F", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:sinumerik_828d:4.8:sp2:*:*:*:*:*:*", matchCriteriaId: "BDBAEDBC-6A76-495D-9BC7-BA687F32EE40", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:sinumerik_828d:4.8:sp3:*:*:*:*:*:*", matchCriteriaId: "45EF769B-1EB1-4D2D-84C5-8005EF1EE1EF", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:sinumerik_828d:4.8:sp4:*:*:*:*:*:*", matchCriteriaId: "48EE5859-5450-4078-94E7-E525B999A837", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:siemens:sinumerik_840d_sl:*:*:*:*:*:*:*:*", matchCriteriaId: "9FFC86D6-F312-4097-91A6-79C78502323F", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "Affected devices improperly handle large amounts of specially crafted UDP packets.\r\n\r\nThis could allow an unauthenticated remote attacker to trigger a denial of service condition.", }, { lang: "es", value: "Se ha identificado una vulnerabilidad en Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Kits de desarrollo/evaluación para PROFINET IO: EK-ERTEC 200P, SIMATIC CFU PA, SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. variantes SIPLUS), SIMATIC ET200AL, SIMATIC ET200M (incl. variantes SIPLUS), SIMATIC ET200MP IM155-5 PN BA (incl. variantes SIPLUS), SIMATIC ET200MP IM155-5 PN HF (incl. variantes SIPLUS), SIMATIC ET200MP IM155-5 PN ST (incl. variantes SIPLUS) SIPLUS), SIMATIC ET200S (incl. variantes SIPLUS), SIMATIC ET200SP IM155-6 PN BA (incl. variantes SIPLUS), SIMATIC ET200SP IM155-6 PN HA (incl. variantes SIPLUS), SIMATIC ET200SP IM155-6 PN HF (incl. variantes SIPLUS), SIMATIC ET200SP IM155-6 PN HS (incl. variantes SIPLUS), SIMATIC ET200SP IM155-6 PN ST (incl. variantes SIPLUS). SIPLUS), SIMATIC ET200SP IM155-6 PN/2 HF (incl. variantes SIPLUS), SIMATIC ET200SP IM155-6 PN/3 HF (incl. variantes SIPLUS) variantes SIPLUS), SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 4AO U/I 4xM12, SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12, SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12, SIMATIC ET200ecoPN, 8AI 4 U/I; 4 RTD/TC 8xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN: IO-Link Master, SIMATIC ET200pro, paneles exteriores SIMATIC HMI Comfort de 7\" y 15\" (incl. variantes SIPLUS), paneles SIMATIC HMI Comfort de 4\" a 22\" (incl. variantes SIPLUS), paneles móviles SIMATIC HMI KTP, acoplador SIMATIC PN/PN (incl. variantes SIPLUS NET), driver SIMATIC PROFINET, familia de CPUs SIMATIC S7-1200 (incl. variantes SIPLUS), familia de CPUs SIMATIC S7-1500 (incl. variantes SIPLUS). CPUs ET200 y variantes SIPLUS), SIMATIC S7-1500 Software Controller, familia de CPUs SIMATIC S7-300 (incl. CPUs ET200 y variantes SIPLUS), familia de CPUs SIMATIC S7-400 H V6 (incl. variantes SIPLUS), familia de CPUs SIMATIC S7-400 PN/DP V6 e inferiores (incl. variantes SIPLUS), familia de CPUs SIMATIC S7-400 PN/DP V7 (incl. variantes SIPLUS), SIMATIC S7-400 PN/DP V7 (incl. variantes SIPLUS). SIPLUS), familia de CPU SIMATIC S7-410 V8 (incl. variantes SIPLUS), SIMATIC TDC CP51M1, SIMATIC TDC CPU555, SIMATIC WinAC RTX (F) 2010, SINAMICS DCM, SINAMICS DCP, SINAMICS G110M V4. 7 PN Control Unit, SINAMICS G120 V4.7 PN Control Unit (incl. variantes SIPLUS), SINAMICS G130 V4.7 Control Unit, SINAMICS G150 Control Unit, SINAMICS GH150 V4. 7, SINAMICS GL150 V4.7, SINAMICS GM150 V4.7, SINAMICS S110, SINAMICS S120 V4.7 (incluidas las variantes SIPLUS), SINAMICS S150, SINAMICS SL150 V4.7, SINAMICS SM120 V4.7, SINUMERIK 828D, SINUMERIK 840D sl. Los dispositivos afectados contienen una vulnerabilidad que permite a un atacante no autenticado desencadenar una condición de denegación de servicio. La vulnerabilidad puede activarse si se envía al dispositivo una gran cantidad de paquetes UDP especialmente diseñados. La vulnerabilidad de seguridad podría ser explotada por un atacante con acceso a la red de los sistemas afectados. La explotación exitosa no requiere privilegios del sistema ni interacción del usuario. Un atacante podría utilizar la vulnerabilidad para comprometer la disponibilidad del dispositivo. En el momento de la publicación del aviso no se conocía ninguna explotación pública de esta vulnerabilidad de seguridad", }, ], id: "CVE-2019-10936", lastModified: "2024-11-21T04:20:11.257", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 3.9, impactScore: 3.6, source: "productcert@siemens.com", type: "Secondary", }, { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 3.9, impactScore: 3.6, source: "nvd@nist.gov", type: "Secondary", }, ], }, published: "2019-10-10T14:15:14.707", references: [ { source: "productcert@siemens.com", url: "https://cert-portal.siemens.com/productcert/html/ssa-473245.html", }, { source: "productcert@siemens.com", tags: [ "Vendor Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://cert-portal.siemens.com/productcert/html/ssa-473245.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf", }, ], sourceIdentifier: "productcert@siemens.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-400", }, ], source: "productcert@siemens.com", type: "Primary", }, { description: [ { lang: "en", value: "CWE-400", }, ], source: "nvd@nist.gov", type: "Secondary", }, ], }
Vulnerability from fkie_nvd
Published
2019-04-17 14:29
Modified
2024-11-21 04:46
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
The webserver of the affected devices contains a vulnerability that may lead to
a denial of service condition. An attacker may cause a denial of service
situation which leads to a restart of the webserver of the affected device.
The security vulnerability could be exploited by an attacker with network
access to the affected systems. Successful exploitation requires no system
privileges and no user interaction. An attacker could use the vulnerability
to compromise availability of the device.
References
▼ | URL | Tags | |
---|---|---|---|
productcert@siemens.com | https://cert-portal.siemens.com/productcert/pdf/ssa-480230.pdf | Vendor Advisory | |
productcert@siemens.com | https://cert-portal.siemens.com/productcert/pdf/ssa-530931.pdf | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-480230.pdf | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-530931.pdf | Vendor Advisory |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
siemens | cp1604_firmware | * | |
siemens | cp1604 | - | |
siemens | cp1616_firmware | * | |
siemens | cp1616 | - | |
siemens | simatic_rf185c_firmware | * | |
siemens | simatic_rf185c | - | |
siemens | simatic_cp343-1_advanced_firmware | * | |
siemens | simatic_cp343-1_advanced | - | |
siemens | simatic_cp443-1_firmware | * | |
siemens | simatic_cp443-1 | - | |
siemens | simatic_cp443-1_advanced_firmware | * | |
siemens | simatic_cp443-1_advanced | - | |
siemens | simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware | * | |
siemens | simatic_et_200_sp_open_controller_cpu_1515sp_pc | - | |
siemens | simatic_et_200_sp_open_controller_cpu_1515sp_pc2_firmware | * | |
siemens | simatic_et_200_sp_open_controller_cpu_1515sp_pc2 | - | |
siemens | simatic_hmi_comfort_outdoor_panels_firmware | * | |
siemens | simatic_hmi_comfort_outdoor_panels_firmware | 15.1 | |
siemens | simatic_hmi_comfort_outdoor_panels | - | |
siemens | simatic_hmi_comfort_panels_firmware | * | |
siemens | simatic_hmi_comfort_panels_firmware | 15.1 | |
siemens | simatic_hmi_comfort_panels | - | |
siemens | simatic_hmi_ktp_mobile_panels_ktp400f_firmware | * | |
siemens | simatic_hmi_ktp_mobile_panels_ktp400f_firmware | 15.1 | |
siemens | simatic_hmi_ktp_mobile_panels_ktp400f | - | |
siemens | simatic_hmi_ktp_mobile_panels_ktp700_firmware | * | |
siemens | simatic_hmi_ktp_mobile_panels_ktp700_firmware | 15.1 | |
siemens | simatic_hmi_ktp_mobile_panels_ktp700 | - | |
siemens | simatic_hmi_ktp_mobile_panels_ktp700f_firmware | * | |
siemens | simatic_hmi_ktp_mobile_panels_ktp700f_firmware | 15.1 | |
siemens | simatic_hmi_ktp_mobile_panels_ktp700f | - | |
siemens | simatic_hmi_ktp_mobile_panels_ktp900_firmware | * | |
siemens | simatic_hmi_ktp_mobile_panels_ktp900_firmware | 15.1 | |
siemens | simatic_hmi_ktp_mobile_panels_ktp900 | - | |
siemens | simatic_hmi_ktp_mobile_panels_ktp900f_firmware | * | |
siemens | simatic_hmi_ktp_mobile_panels_ktp900f_firmware | 15.1 | |
siemens | simatic_hmi_ktp_mobile_panels_ktp900f | - | |
siemens | simatic_cp443-1_opc_ua | * | |
siemens | simatic_ipc_diagmonitor | * | |
siemens | simatic_s7-1500_software_controller | * | |
siemens | simatic_s7-plcsim_advanced | * | |
siemens | simatic_s7-plcsim_advanced | 2.0 | |
siemens | simatic_s7-plcsim_advanced | 2.0 | |
siemens | simatic_wincc_runtime_advanced | * | |
siemens | simatic_wincc_runtime_advanced | 15.1 | |
siemens | simatic_wincc_runtime_advanced | 15.1 | |
siemens | simatic_wincc_runtime_advanced | 15.1 | |
siemens | simatic_wincc_runtime_advanced | 15.1 | |
siemens | sitop_manager | * | |
siemens | simatic_rf600r_firmware | * | |
siemens | simatic_rf600r | - | |
siemens | simatic_rf188c_firmware | * | |
siemens | simatic_rf188c | - | |
siemens | simatic_rf186c_firmware | * | |
siemens | simatic_rf186c | - | |
siemens | simatic_rf182c_firmware | * | |
siemens | simatic_rf182c | - | |
siemens | simatic_rf181-eip_firmware | * | |
siemens | simatic_rf181-eip | - | |
siemens | simatic_s7-1500_firmware | * | |
siemens | simatic_s7-1500 | - | |
siemens | simatic_s7-300_firmware | * | |
siemens | simatic_s7-300 | - | |
siemens | simatic_s7-400_pn_firmware | * | |
siemens | simatic_s7-400_pn | - | |
siemens | simatic_s7-400_pn\/dp_firmware | * | |
siemens | simatic_s7-400_pn\/dp | - | |
siemens | simatic_teleservice_adapter_ie_advanced_firmware | * | |
siemens | simatic_teleservice_adapter_ie_advanced | - | |
siemens | simatic_teleservice_adapter_ie_basic_firmware | * | |
siemens | simatic_teleservice_adapter_ie_basic | - | |
siemens | simatic_teleservice_adapter_ie_standard_firmware | * | |
siemens | simatic_teleservice_adapter_ie_standard | - | |
siemens | simatic_winac_rtx_firmware | * | |
siemens | simatic_winac_rtx_firmware | 2010 | |
siemens | simatic_winac_rtx | - | |
siemens | simocode_pro_v_eip_firmware | * | |
siemens | simocode_pro_v_eip | - | |
siemens | simocode_pro_v_pn_firmware | * | |
siemens | simocode_pro_v_pn | - | |
siemens | sinamics_g130_firmware | * | |
siemens | sinamics_g130 | - | |
siemens | sinamics_g150_firmware | * | |
siemens | sinamics_g150 | - | |
siemens | sinamics_s120_firmware | * | |
siemens | sinamics_s120 | - | |
siemens | sinamics_s150_firmware | * | |
siemens | sinamics_s150_firmware | 5.1 | |
siemens | sinamics_s150_firmware | 5.1 | |
siemens | sinamics_s150_firmware | 5.1 | |
siemens | sinamics_s150 | - | |
siemens | sinamics_s210_firmware | * | |
siemens | sinamics_s210_firmware | 5.1 | |
siemens | sinamics_s210_firmware | 5.1 | |
siemens | sinamics_s210 | - | |
siemens | sitop_psu8600_firmware | * | |
siemens | sitop_psu8600 | - | |
siemens | sitop_ups1600_firmware | * | |
siemens | sitop_ups1600 | - | |
siemens | tim_1531_irc_firmware | * | |
siemens | tim_1531_irc | - | |
siemens | simatic_s7-1500f_firmware | * | |
siemens | simatic_s7-1500f | - | |
siemens | simatic_s7-1500s_firmware | * | |
siemens | simatic_s7-1500s | - | |
siemens | simatic_s7-1500t_firmware | * | |
siemens | simatic_s7-1500t | - | |
siemens | sinamics_gh150_firmware | * | |
siemens | sinamics_gh150_firmware | 4.8 | |
siemens | sinamics_gh150 | - | |
siemens | sinamics_gl150_firmware | * | |
siemens | sinamics_gl150_firmware | 4.8 | |
siemens | sinamics_gl150 | - | |
siemens | sinamics_gm150_firmware | * | |
siemens | sinamics_gm150_firmware | 4.8 | |
siemens | sinamics_gm150 | - | |
siemens | sinamics_sl150_firmware | * | |
siemens | sinamics_sl150_firmware | 4.8 | |
siemens | sinamics_sl150 | - | |
siemens | sinamics_sm120_firmware | * | |
siemens | sinamics_sm120_firmware | 4.8 | |
siemens | sinamics_sm120 | - | |
siemens | sinamics_sm150_firmware | * | |
siemens | sinamics_sm150_firmware | 5.1 | |
siemens | sinamics_sm150 | - |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:cp1604_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E737620D-9D00-4151-B232-7DFB7FD768B3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:cp1604:-:*:*:*:*:*:*:*", matchCriteriaId: "6222006F-09D7-49F7-B8C7-4D94298A8F6A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:cp1616_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "65FE6F54-1457-4EB6-9273-1D93B3B97386", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:cp1616:-:*:*:*:*:*:*:*", matchCriteriaId: "184365A2-BAD2-4926-ACEE-F71E018D3CE5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_rf185c_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "69EE2BF6-3846-478F-9AC6-BEF34617F3B5", versionEndExcluding: "1.1.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_rf185c:-:*:*:*:*:*:*:*", matchCriteriaId: "82494B5E-80EE-47ED-B87E-CF8C8907B6FE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp343-1_advanced_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "1E6601B8-E032-4B39-BF65-F25CF047EB99", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp343-1_advanced:-:*:*:*:*:*:*:*", matchCriteriaId: "ACCC0229-E454-4BEF-931A-3CD820500822", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp443-1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2035A020-F41E-4FC7-A290-9923574D4921", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp443-1:-:*:*:*:*:*:*:*", matchCriteriaId: "EB8636E9-A3DA-4DDC-A3FC-B3EAAD07952E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_cp443-1_advanced_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "1AD15638-8B84-4DA2-9DDC-9A1CA3548E91", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_cp443-1_advanced:-:*:*:*:*:*:*:*", matchCriteriaId: "BFE94F56-71DB-4837-9818-6827C80DE2BC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D1873751-81F4-4732-B30F-9F2DEECBC110", versionEndExcluding: "2.1.6", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200_sp_open_controller_cpu_1515sp_pc:-:*:*:*:*:*:*:*", matchCriteriaId: "C9A5678E-9EAA-441A-AC77-94F824D64AEE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_et_200_sp_open_controller_cpu_1515sp_pc2_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F36AC571-C958-4CB8-91D9-5417C1812C02", versionEndExcluding: "2.7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_et_200_sp_open_controller_cpu_1515sp_pc2:-:*:*:*:*:*:*:*", matchCriteriaId: "00361A3C-60E9-4365-BB51-09D7792C441D", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7299F88D-8885-4871-93E1-CBEFD3156B15", versionEndExcluding: "15.1", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:15.1:-:*:*:*:*:*:*", matchCriteriaId: "F18EA7BD-47D0-4367-8F18-C89239B201E3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_comfort_outdoor_panels:-:*:*:*:*:*:*:*", matchCriteriaId: "F4830E0D-0128-4E5B-AB81-2B238471AE4B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_comfort_panels_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "865FD012-F390-4BB8-B14F-533840B95512", versionEndExcluding: "15.1", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:simatic_hmi_comfort_panels_firmware:15.1:-:*:*:*:*:*:*", matchCriteriaId: "5418D916-49A6-4B79-A653-E2C5221DEBE8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_comfort_panels:-:*:*:*:*:*:*:*", matchCriteriaId: "3BCFE761-35C9-43EF-85BC-E8083B9F75CB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A8EC6926-258F-4F5C-88D2-33FE363340DB", versionEndExcluding: "15.1", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:-:*:*:*:*:*:*", matchCriteriaId: "97E283EF-A950-40E7-91C7-839203A333A5", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp400f:-:*:*:*:*:*:*:*", matchCriteriaId: "F106DEE3-4DED-46E4-9661-9D9C7B729BC0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2D9CF819-E06C-4EAA-85B3-AC40E039D485", versionEndExcluding: "15.1", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:-:*:*:*:*:*:*", matchCriteriaId: "4AF727E5-7849-4980-8AA5-7469FD52DF86", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp700:-:*:*:*:*:*:*:*", matchCriteriaId: "D175BC55-2EAA-4D4A-9E05-2FBB228160F1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B28FB484-526A-437E-80E3-B62F54F1BEF6", versionEndExcluding: "15.1", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:-:*:*:*:*:*:*", matchCriteriaId: "61DFC57F-0359-4B4A-A13C-067B21D3DA7B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp700f:-:*:*:*:*:*:*:*", matchCriteriaId: "5C39166C-38CA-426F-9702-B9CA5ED6630C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "66FC2264-7DDD-4BEF-9795-AC6A5A00886B", versionEndExcluding: "15.1", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:-:*:*:*:*:*:*", matchCriteriaId: "D68363A9-D1D5-4E49-98D1-E5F8C324BC22", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp900:-:*:*:*:*:*:*:*", matchCriteriaId: "D29338CD-57BD-4734-9204-118EA53D42FB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8E4F0084-91A5-4D7E-971B-9DB979849594", versionEndExcluding: "15.1", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:-:*:*:*:*:*:*", matchCriteriaId: "36EEF9EB-91EF-4697-A963-7C8F955778EC", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp900f:-:*:*:*:*:*:*:*", matchCriteriaId: "9E7858AB-F89E-4E50-8873-DE8F5F2A07CB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:siemens:simatic_cp443-1_opc_ua:*:*:*:*:*:*:*:*", matchCriteriaId: "56396833-12BF-4AE5-8D3E-695652A99DBF", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:simatic_ipc_diagmonitor:*:*:*:*:*:*:*:*", matchCriteriaId: "6FD49A39-47D7-473C-9E46-6D9246BC6D04", versionEndExcluding: "5.1.3", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:simatic_s7-1500_software_controller:*:*:*:*:*:*:*:*", matchCriteriaId: "11C0A94D-5506-4A75-99E1-CA9769AF057C", versionEndExcluding: "2.7", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:simatic_s7-plcsim_advanced:*:*:*:*:*:*:*:*", matchCriteriaId: "8B66A2A4-5062-45F8-A615-2DA716650909", versionEndExcluding: "2.0", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:simatic_s7-plcsim_advanced:2.0:-:*:*:*:*:*:*", matchCriteriaId: "AED3A3AF-EF77-4E58-91AD-BBE01E1DA4A6", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:simatic_s7-plcsim_advanced:2.0:sp1:*:*:*:*:*:*", matchCriteriaId: "23039930-E45C-4B0E-883A-E2F9A7502984", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:*", matchCriteriaId: "06364800-4C54-4BE4-B4AA-0CF29E4E82AA", versionEndExcluding: "15.1", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:-:*:*:*:*:*:*", matchCriteriaId: "4FBDFA7B-504A-4F58-967F-15CAFCEB5594", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:update1:*:*:*:*:*:*", matchCriteriaId: "4D184A8F-963A-4730-AED4-1994EEA91702", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:update2:*:*:*:*:*:*", matchCriteriaId: "16DAC92E-141C-4923-96F5-2620F60E763A", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:update3:*:*:*:*:*:*", matchCriteriaId: "B3300D8B-E0A1-4CEF-8BE0-AED3F19E9015", vulnerable: true, }, { criteria: "cpe:2.3:a:siemens:sitop_manager:*:*:*:*:*:*:*:*", matchCriteriaId: "2662688E-6975-46C7-939B-25FF4790518D", versionEndExcluding: "1.1", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_rf600r_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "16CBED3D-892A-4EC0-BE2E-358040C34304", versionEndExcluding: "3.2.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_rf600r:-:*:*:*:*:*:*:*", matchCriteriaId: "EFA55275-691D-4269-93E4-C559C89E3FA3", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_rf188c_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "25F96DAA-696D-4EB4-97DF-986C7681700B", versionEndExcluding: "1.1.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_rf188c:-:*:*:*:*:*:*:*", matchCriteriaId: "E21F9909-8D80-40BE-81E0-6ED7FE140A3A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_rf186c_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "CF8FFD1C-8E33-48E9-A884-B80311F8BA4C", versionEndExcluding: "1.1.0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_rf186c:-:*:*:*:*:*:*:*", matchCriteriaId: "9B0933EB-82BE-42BB-978B-C9EC2FE1C795", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_rf182c_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0FC4F972-3A3B-421C-8D62-9C5C4D1992CF", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_rf182c:-:*:*:*:*:*:*:*", matchCriteriaId: "7540DAD9-2AAC-46A9-B1C5-BB1AC4FCE710", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_rf181-eip_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "AFA94867-4367-4186-8A4B-44C3CBCCEF7F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_rf181-eip:-:*:*:*:*:*:*:*", matchCriteriaId: "E10A0D57-8805-44DB-95E3-1B240ED5ED09", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2AE766CD-695B-4A12-8BC5-3743D8E3D73E", versionEndExcluding: "2.6.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*", matchCriteriaId: "30DDEA9B-E1BF-4572-8E12-D13C54603E77", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-300_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "9461CADE-1624-4D1B-8CF2-CF65F75071C0", versionEndExcluding: "3.3.17", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-300:-:*:*:*:*:*:*:*", matchCriteriaId: "7EFD4E99-5C66-443F-8B6F-FA01C895DE78", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-400_pn_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0A2219FE-2C3F-4948-85D6-3C53AC08722B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-400_pn:-:*:*:*:*:*:*:*", matchCriteriaId: "795D0FF9-1D0B-4C74-BEF3-58EAE74DFA0C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-400_pn\\/dp_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BC917346-94F6-44FD-AC00-AED0CF3CBBD1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-400_pn\\/dp:-:*:*:*:*:*:*:*", matchCriteriaId: "F60D816D-85A5-4971-AF2D-666AE0B74E9E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_advanced_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "C8E76BDE-C7E9-4D6B-B5D9-A456516CD016", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_advanced:-:*:*:*:*:*:*:*", matchCriteriaId: "71DA3D1A-E435-418F-9A13-945B4BA15FC7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_basic_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "80D166A8-1EEC-42F4-8EAB-1747247A7A05", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_basic:-:*:*:*:*:*:*:*", matchCriteriaId: "FFA520B6-5177-43E4-87C0-C215F79FE9B4", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_standard_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5C887573-8BE8-42CF-B35A-22F9311AC627", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_standard:-:*:*:*:*:*:*:*", matchCriteriaId: "3A5A3F7E-D039-430F-89B0-6AB4FD2428D4", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_winac_rtx_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "80BDBB38-20D2-48C3-8B58-62C2D8CC00B8", versionEndExcluding: "2010", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:simatic_winac_rtx_firmware:2010:-:*:*:*:*:*:*", matchCriteriaId: "EA59D713-F342-4CDA-BDC8-108352D385DA", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_winac_rtx:-:*:*:*:*:*:*:*", matchCriteriaId: "CA5ADAB0-3985-4933-8CDD-D1546D8271CC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simocode_pro_v_eip_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8A001968-C7FD-4C11-8439-11532B234CC2", versionEndExcluding: "1.1.3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simocode_pro_v_eip:-:*:*:*:*:*:*:*", matchCriteriaId: "50BDA360-0D33-42DC-ADB9-2F69503C2CD8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simocode_pro_v_pn_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "15CB26DA-7CA0-4BD6-A219-01F6E8A6F03F", versionEndExcluding: "2.1.3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simocode_pro_v_pn:-:*:*:*:*:*:*:*", matchCriteriaId: "1779AE78-AC90-48BE-8FF2-CC11E7CA3CB4", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g130_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "856768D2-C096-4CA7-B26F-E94B005C0D79", versionEndExcluding: "5.2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:*", matchCriteriaId: "373DBE44-AC28-4D04-93BB-35CD8C60E899", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_g150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "C579C2C7-0402-46B2-A770-C3B7F71D1096", versionEndExcluding: "5.2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:*", matchCriteriaId: "2296CA65-0E89-4BCB-8003-E7212BF1F585", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s120_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "03F9CBC3-B2B3-4FA7-963D-A8F3AE6D8EA0", versionEndExcluding: "5.2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*", matchCriteriaId: "E5A824BD-935F-4E53-8313-C5544B0489C7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "126AC93E-A39F-4754-9707-207C9F2F64F4", versionEndExcluding: "5.1", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_s150_firmware:5.1:-:*:*:*:*:*:*", matchCriteriaId: "3E8BCCED-BDC6-4785-8705-799836E5024E", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_s150_firmware:5.1:sp1:*:*:*:*:*:*", matchCriteriaId: "098262CC-4D3B-4E55-83C3-2816403C553B", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_s150_firmware:5.1:sp1_hotfix2:*:*:*:*:*:*", matchCriteriaId: "6092F899-9A89-4FA4-BD80-97511DF7CF8F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:*", matchCriteriaId: "0D48682C-A39D-4A09-B904-50FA64A9D2A5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_s210_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B7269713-6505-41DF-B85B-F729E24A3F5B", versionEndExcluding: "5.1", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_s210_firmware:5.1:-:*:*:*:*:*:*", matchCriteriaId: "BEBF14B3-65A0-41E9-B99C-D88548F307CD", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_s210_firmware:5.1:sp1:*:*:*:*:*:*", matchCriteriaId: "F151297C-3097-483F-98B5-0261BD547421", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_s210:-:*:*:*:*:*:*:*", matchCriteriaId: "7BFA8FB3-12A9-4D2E-BCFD-C66313521C80", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sitop_psu8600_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6F389808-001E-4650-86B2-00A72D25BCD0", versionEndExcluding: "1.5", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sitop_psu8600:-:*:*:*:*:*:*:*", matchCriteriaId: "55058209-8AE5-42AF-80D4-5A7A44307266", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sitop_ups1600_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BD39CC96-ABE3-4854-A102-36AFE1F6CB14", versionEndExcluding: "2.3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sitop_ups1600:-:*:*:*:*:*:*:*", matchCriteriaId: "6FC1A64E-6A27-4F91-8A13-829E0F7D8E80", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B023E75A-B76D-4FD8-9660-1F233092160F", versionEndExcluding: "2.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:*", matchCriteriaId: "C1D94BEB-BBFB-4258-9835-87DBBB999239", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1500f_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F9C47A4A-BE81-499A-AB36-491661B88693", versionEndExcluding: "2.6.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1500f:-:*:*:*:*:*:*:*", matchCriteriaId: "A255BC06-2776-4111-A525-76B17371B295", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1500s_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "66A446D2-39ED-4635-AAA0-85D977F600FE", versionEndExcluding: "2.6.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1500s:-:*:*:*:*:*:*:*", matchCriteriaId: "C1752A2A-0034-4E00-AAC6-FA15345D7A41", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_s7-1500t_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5238622A-BCAD-4A06-9920-49BECFDDC2A6", versionEndExcluding: "2.6.1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_s7-1500t:-:*:*:*:*:*:*:*", matchCriteriaId: "741B2C38-174C-49DF-98D8-F7D6F49D1CE5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_gh150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6E231DE7-8B8D-41A3-A163-CE8EF50AF9D0", versionEndExcluding: "4.8", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_gh150_firmware:4.8:-:*:*:*:*:*:*", matchCriteriaId: "6D076504-AFE3-4C51-80E5-C5992CA7D511", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_gh150:-:*:*:*:*:*:*:*", matchCriteriaId: "BF977545-395A-4C34-BB22-A1047B5B6E85", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_gl150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3653DA37-DB23-41E0-8CE8-838E384AA40A", versionEndExcluding: "4.8", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_gl150_firmware:4.8:-:*:*:*:*:*:*", matchCriteriaId: "0F86A334-10F9-4DFB-A421-CBCAFD86C8C2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_gl150:-:*:*:*:*:*:*:*", matchCriteriaId: "DED7F33B-D475-4232-8683-48554A6729F7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_gm150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0E25804D-D943-4C2A-9C78-AAC61F7BA4FF", versionEndExcluding: "4.8", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_gm150_firmware:4.8:-:*:*:*:*:*:*", matchCriteriaId: "06B69CD4-3AEC-4014-81DB-33805A44A5D3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_gm150:-:*:*:*:*:*:*:*", matchCriteriaId: "DD76CFB0-B5D7-40DC-8D14-FC9C9BACF3CD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_sl150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FD67D30A-8681-41AE-B248-7E50BA1B9FC8", versionEndExcluding: "4.8", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_sl150_firmware:4.8:-:*:*:*:*:*:*", matchCriteriaId: "FCC0EE8B-1088-46B6-992A-B8E12A7B7DC2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_sl150:-:*:*:*:*:*:*:*", matchCriteriaId: "C6619B0F-7CDC-40A6-89B2-C6067AF45214", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_sm120_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "31393A1B-4DBC-476D-875E-463B4B887E1B", versionEndExcluding: "4.8", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_sm120_firmware:4.8:-:*:*:*:*:*:*", matchCriteriaId: "0206F9F2-27C7-4D2F-817B-13F8FA31E547", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_sm120:-:*:*:*:*:*:*:*", matchCriteriaId: "444DD77F-DB65-4766-A89D-7A679B4CA1E1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:sinamics_sm150_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FC70D596-AA1E-4196-87B0-BECEE6568AA7", versionEndExcluding: "5.1", vulnerable: true, }, { criteria: "cpe:2.3:o:siemens:sinamics_sm150_firmware:5.1:-:*:*:*:*:*:*", matchCriteriaId: "1E81CDB5-122F-48D1-B9F1-4C401D46D978", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:sinamics_sm150:-:*:*:*:*:*:*:*", matchCriteriaId: "2AE231E2-2B2B-407A-BF7A-9EA35F394229", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "The webserver of the affected devices contains a vulnerability that may lead to\r\na denial of service condition. An attacker may cause a denial of service\r\nsituation which leads to a restart of the webserver of the affected device.\r\n\r\nThe security vulnerability could be exploited by an attacker with network\r\naccess to the affected systems. Successful exploitation requires no system\r\nprivileges and no user interaction. An attacker could use the vulnerability\r\nto compromise availability of the device.", }, { lang: "es", value: "SIPLUS), paneles exteriores SIMATIC HMI Comfort de 7\" y 15\" (incl. variantes SIPLUS), paneles SIMATIC HMI Comfort de 4\" - 22\" (incl. variantes SIPLUS), paneles SIMATIC ET 200SP Open Controller CPU 1515SP PC SIPLUS), paneles móviles SIMATIC HMI KTP KTP400F, KTP700, KTP700F, KTP900 y KTP900F, SIMATIC IPC DiagMonitor, SIMATIC RF182C, SIMATIC RF185C, SIMATIC RF186C, SIMATIC RF188C, familia SIMATIC RF600R, familia de CPUs SIMATIC S7-1500 (incl. CPUs ET200 y variantes SIPLUS), controlador de software SIMATIC S7-1500, familia de CPUs SIMATIC S7-300 (incluidas las CPUs ET200 y variantes SIPLUS), familia de CPUs SIMATIC S7-400 PN/DP V6 e inferiores (incluidas las variantes SIPLUS), familia de CPUs SIMATIC S7-400 PN/DP V7 (incluidas las variantes SIPLUS) SIPLUS), SIMATIC S7-PLCSIM Advanced, SIMATIC Teleservice Adapter IE Advanced, SIMATIC Teleservice Adapter IE Basic, SIMATIC Teleservice Adapter IE Standard, SIMATIC WinAC RTX (F) 2010, SIMATIC WinCC Runtime Advanced, SIMOCODE pro V EIP (incl. SIPLUS), SIMOCODE pro V PN (incl. variantes SIPLUS), SINAMICS G130 V4.6 Control Unit, SINAMICS G130 V4.7 Control Unit, SINAMICS G130 V4.7 SP1 Control Unit, SINAMICS G130 V4.8 Control Unit, SINAMICS G130 V5.1 Control Unit, SINAMICS G130 V5. 1 SP1 Unidad de control, SINAMICS G150 V4.6 Unidad de control, SINAMICS G150 V4.7 Unidad de control, SINAMICS G150 V4.7 SP1 Unidad de control, SINAMICS G150 V4.8 Unidad de control, SINAMICS G150 V5. 1 Unidad de control, SINAMICS G150 V5.1 SP1 Unidad de control, SINAMICS GH150 V4.7 (Unidad de control), SINAMICS GH150 V4.8 (Unidad de control), SINAMICS GL150 V4.7 (Unidad de control), SINAMICS GL150 V4. 8 (Unidad de control), SINAMICS GM150 V4.7 (Unidad de control), SINAMICS GM150 V4.8 (Unidad de control), SINAMICS S120 V4.6 Unidad de control (incl. variantes SIPLUS), SINAMICS S120 V4.7 Unidad de control (incl. variantes SIPLUS) SIPLUS), SINAMICS S120 V4.7 SP1 (incl. variantes SIPLUS), SINAMICS S120 V4.8 (incl. variantes SIPLUS), SINAMICS S120 V5.1 (incl. variantes SIPLUS) SIPLUS), SINAMICS S120 V5.1 SP1 Unidad de Control (incl. variantes SIPLUS), SINAMICS S150 V4.6 Unidad de Control, SINAMICS S150 V4.7 Unidad de Control, SINAMICS S150 V4.7 SP1 Unidad de Control, SINAMICS S150 V4. 8 Unidad de control, SINAMICS S150 V5.1 Unidad de control, SINAMICS S150 V5.1 SP1 Unidad de control, SINAMICS S210 V5.1 Unidad de control, SINAMICS S210 V5.1 SP1 Unidad de control, SINAMICS SL150 V4. 7 (Unidad de Control), SINAMICS SL150 V4.8 (Unidad de Control), SINAMICS SM120 V4.7 (Unidad de Control), SINAMICS SM120 V4.8 (Unidad de Control), SINAMICS SM150 V4. 8 (unidad de control), SIPLUS NET CP 343-1 Advanced, SIPLUS NET CP 443-1, SIPLUS NET CP 443-1 Advanced, SITOP Manager, SITOP PSU8600, SITOP UPS1600 (incl. variantes SIPLUS), TIM 1531 IRC (incl. variantes SIPLUS NET). El servidor web de los dispositivos afectados contiene una vulnerabilidad que puede conducir a una condición de denegación de servicio. Un atacante puede provocar una situación de denegación de servicio que lleve a reiniciar el servidor web del dispositivo afectado. La vulnerabilidad de seguridad podría ser explotada por un atacante con acceso a la red de los sistemas afectados. La explotación exitosa no requiere privilegios del sistema ni interacción del usuario. Un atacante podría utilizar la vulnerabilidad para comprometer la disponibilidad del dispositivo", }, ], id: "CVE-2019-6568", lastModified: "2024-11-21T04:46:42.773", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 3.9, impactScore: 3.6, source: "productcert@siemens.com", type: "Secondary", }, { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 3.9, impactScore: 3.6, source: "nvd@nist.gov", type: "Secondary", }, ], }, published: "2019-04-17T14:29:03.683", references: [ { source: "productcert@siemens.com", tags: [ "Vendor Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-480230.pdf", }, { source: "productcert@siemens.com", tags: [ "Vendor Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-530931.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-480230.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-530931.pdf", }, ], sourceIdentifier: "productcert@siemens.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-125", }, ], source: "productcert@siemens.com", type: "Primary", }, { description: [ { lang: "en", value: "CWE-125", }, ], source: "nvd@nist.gov", type: "Secondary", }, ], }