description: Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected. This vulnerability affects only SIMATIC HMI Multi Panels and HMI Mobile Panels, and S7-300/S7-400 devices.
problem types: CWE-400: Uncontrolled Resource Consumption
affected:
{
product: Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
vendor: Siemens
versions:
status: affected, version: All versions < V4.1.1 Patch04
}
{
product: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
vendor: Siemens
versions:
status: affected, version: All versions < V4.2.1 Patch03
}
{
product: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P
vendor: Siemens
versions:
status: affected, version: All versions < V4.4.0 Patch01
}
{
product: IE/AS-i Link PN IO
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: IE/PB-Link (incl. SIPLUS NET variants)
vendor: Siemens
versions:
status: affected, version: All versions < V3.0
}
{
product: SCALANCE M-800 / S615
vendor: Siemens
versions:
status: affected, version: All versions < V4.03
}
{
product: SCALANCE W700
vendor: Siemens
versions:
status: affected, version: All versions < V6.1
}
{
product: SCALANCE X-200 switch family (incl. SIPLUS NET variants)
vendor: Siemens
versions:
status: affected, version: All versions < V5.2.2
}
{
product: SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
vendor: Siemens
versions:
status: affected, version: All versions < V5.4.0
}
{
product: SCALANCE X-300 switch family (incl. SIPLUS NET variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.1.0
}
{
product: SCALANCE X408
vendor: Siemens
versions:
status: affected, version: All versions < V4.1.0
}
{
product: SCALANCE X414
vendor: Siemens
versions:
status: affected, version: All versions < V3.10.2
}
{
product: SCALANCE XM-400 Family
vendor: Siemens
versions:
status: affected, version: All versions < V6.1
}
{
product: SCALANCE XR-500 Family
vendor: Siemens
versions:
status: affected, version: All versions < V6.1
}
{
product: SIMATIC CM 1542-1
vendor: Siemens
versions:
status: affected, version: All versions < V2.0
}
{
product: SIMATIC CM 1542SP-1
vendor: Siemens
versions:
status: affected, version: All versions < V1.0.15
}
{
product: SIMATIC CP 1243-1 (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V2.1.82
}
{
product: SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC CP 1243-1 IRC (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V2.1.82
}
{
product: SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V1.0.15
}
{
product: SIMATIC CP 1543-1 (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V2.1
}
{
product: SIMATIC CP 1543SP-1 (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V1.0.15
}
{
product: SIMATIC CP 1604
vendor: Siemens
versions:
status: affected, version: All versions < V2.7
}
{
product: SIMATIC CP 1616
vendor: Siemens
versions:
status: affected, version: All versions < V2.7
}
{
product: SIMATIC CP 343-1 (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V3.1.3
}
{
product: SIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC CP 343-1 Lean (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V3.1.3
}
{
product: SIMATIC CP 443-1 (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V3.2.17
}
{
product: SIMATIC CP 443-1 Advanced (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V3.2.17
}
{
product: SIMATIC CP 443-1 OPC UA
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC DK-16xx PN IO
vendor: Siemens
versions:
status: affected, version: All versions < V2.7
}
{
product: SIMATIC ET200AL
vendor: Siemens
versions:
status: affected, version: All versions < V1.0.2
}
{
product: SIMATIC ET200M (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200MP IM155-5 PN BA (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.0.1
}
{
product: SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.2
}
{
product: SIMATIC ET200MP IM155-5 PN ST (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.1
}
{
product: SIMATIC ET200S (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200SP (incl. SIPLUS variants, except IM155-6 PN ST and IM155-6 PN HF)
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < 4.2.0
}
{
product: SIMATIC ET200SP IM155-6 PN HS (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.0.1
}
{
product: SIMATIC ET200SP IM155-6 PN ST (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.1.0
}
{
product: SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 4AO U/I 4xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN: IO-Link Master
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200pro
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V15.1
}
{
product: SIMATIC MV400 family
vendor: Siemens
versions:
status: affected, version: All Versions < V7.0.6
}
{
product: SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.0
}
{
product: SIMATIC RF650R
vendor: Siemens
versions:
status: affected, version: All versions < V3.0
}
{
product: SIMATIC RF680R
vendor: Siemens
versions:
status: affected, version: All versions < V3.0
}
{
product: SIMATIC RF685R
vendor: Siemens
versions:
status: affected, version: All versions < V3.0
}
{
product: SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.2.1
}
{
product: SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V2.1
}
{
product: SIMATIC S7-1500 Software Controller (incl. F)
vendor: Siemens
versions:
status: affected, version: All versions < V2.1
}
{
product: SIMATIC S7-200 SMART
vendor: Siemens
versions:
status: affected, version: All versions < V2.3
}
{
product: SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V3.X.14
}
{
product: SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V6.0.7
}
{
product: SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V6.0.6
}
{
product: SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V7.0.2
}
{
product: SIMATIC S7-410 CPU family (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V8.2
}
{
product: SIMATIC TDC CP51M1
vendor: Siemens
versions:
status: affected, version: All versions < V1.1.8
}
{
product: SIMATIC TDC CPU555
vendor: Siemens
versions:
status: affected, version: All versions < V1.1.1
}
{
product: SIMATIC Teleservice Adapter IE Advanced
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC Teleservice Adapter IE Basic
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC Teleservice Adapter IE Standard
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC WinAC RTX (F) 2010
vendor: Siemens
versions:
status: affected, version: All versions < SIMATIC WinAC RTX 2010 SP3
}
{
product: SIMOCODE pro V PN (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V2.0.0
}
{
product: SIMOTION (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.5 HF1
}
{
product: SINAMICS DCM w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V1.4 SP1 HF5
}
{
product: SINAMICS DCP w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V1.2 HF1
}
{
product: SINAMICS G110M w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 SP6 HF3
}
{
product: SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 SP6 HF3
}
{
product: SINAMICS G130 V4.7 w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 HF27
}
{
product: SINAMICS G130 V4.8 w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V4.8 HF4
}
{
product: SINAMICS G150 V4.7 w. PN
vendor: Siemens
versions:
status: affected, version: V4.7: All versions < V4.7 HF27
}
{
product: SINAMICS G150 V4.8 w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V4.8 HF4
}
{
product: SINAMICS S110 w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V4.4 SP3 HF5
}
{
product: SINAMICS S120 V4.7 SP1 w. PN (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SINAMICS S120 V4.7 w. PN (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 HF27
}
{
product: SINAMICS S120 V4.8 w. PN (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.8 HF4
}
{
product: SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.7
}
{
product: SINAMICS S150 V4.7 w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 HF27
}
{
product: SINAMICS S150 V4.8 w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V4.8 HF4
}
{
product: SINAMICS V90 w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V1.01
}
{
product: SINUMERIK 828D V4.5 and prior
vendor: Siemens
versions:
status: affected, version: All versions < V4.5 SP6 HF2
}
{
product: SINUMERIK 828D V4.7
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 SP4 HF1
}
{
product: SINUMERIK 840D sl V4.5 and prior
vendor: Siemens
versions:
status: affected, version: All versions < V4.5 SP6 HF2
}
{
product: SINUMERIK 840D sl V4.7
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 SP4 HF1
}
{
product: SIRIUS ACT 3SU1 interface module PROFINET
vendor: Siemens
versions:
status: affected, version: All versions < V1.1.0
}
{
product: SIRIUS Motor Starter M200D PROFINET
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIRIUS Soft Starter 3RW44 PN
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SITOP PSU8600 PROFINET
vendor: Siemens
versions:
status: affected, version: All versions < V1.2.0
}
{
product: SITOP UPS1600 PROFINET (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V2.2.0
}
{
product: Softnet PROFINET IO for PC-based Windows systems
vendor: Siemens
versions:
status: affected, version: All versions < V14 SP1
}
