description: A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 (All versions), Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P (All versions), KTK ATE530S (All versions), SIDOOR ATD430W (All versions), SIDOOR ATE530S COATED (All versions), SIDOOR ATE531S (All versions), SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions < V2.0), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.0), SIMATIC ET200AL IM157-1 PN (All versions), SIMATIC ET200ecoPN, AI 8xRTD/TC, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DI 16x24VDC, M12-L (All versions  >= V5.1.1), SIMATIC ET200ecoPN, DI 8x24VDC, M12-L (All versions  >= V5.1.1), SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L (All versions  >= V5.1.1), SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L (All versions  >= V5.1.1), SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L (All versions >= V5.1.1), SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 MF HF (All versions), SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants) (All versions), SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC MICRO-DRIVE PDC (All versions), SIMATIC PN/MF Coupler (All versions), SIMATIC PN/PN Coupler (All versions >= V4.2), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.4.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.0), SIMATIC S7-1500 Software Controller (All versions < V2.0), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions), SIMATIC S7-300 CPU 315-2 PN/DP (All versions), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions), SIMATIC S7-300 CPU 317-2 PN/DP (All versions), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions), SIMATIC S7-300 CPU 319-3 PN/DP (All versions), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions), SIMATIC S7-400 H V6 CPU family and below (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) (All versions), SIMATIC TDC CP51M1 (All versions), SIMATIC TDC CPU555 (All versions), SIMATIC WinAC RTX 2010 (All versions), SIMATIC WinAC RTX F 2010 (All versions), SINAMICS S/G Control Unit w. PROFINET (All versions), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions), SIPLUS NET PN/PN Coupler (All versions >= V4.2), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions), SIPLUS S7-300 CPU 315-2 PN/DP (All versions), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions), SIPLUS S7-300 CPU 317-2 PN/DP (All versions), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions). The Interniche-based TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.
problem types: CWE-400: Uncontrolled Resource Consumption
affected:
{
vendor: Siemens
product: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: KTK ATE530S
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIDOOR ATD430W
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIDOOR ATE530S COATED
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIDOOR ATE531S
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET 200pro IM154-8 PN/DP CPU
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET 200pro IM154-8F PN/DP CPU
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET 200pro IM154-8FX PN/DP CPU
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET 200S IM151-8 PN/DP CPU
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET 200S IM151-8F PN/DP CPU
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
versions:
version: All versions < V2.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
versions:
version: All versions < V2.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET200AL IM157-1 PN
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET200ecoPN, AI 8xRTD/TC, M12-L
versions:
version: All versions >= V5.1.1, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L
versions:
version: All versions >= V5.1.1, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L
versions:
version: All versions >= V5.1.1, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L
versions:
version: All versions >= V5.1.1, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET200ecoPN, DI 16x24VDC, M12-L
versions:
version: All versions  >= V5.1.1, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET200ecoPN, DI 8x24VDC, M12-L
versions:
version: All versions  >= V5.1.1, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L
versions:
version: All versions  >= V5.1.1, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L
versions:
version: All versions  >= V5.1.1, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L
versions:
version: All versions >= V5.1.1, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants)
versions:
version: All versions >= V4.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET200SP IM155-6 MF HF
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants)
versions:
version: All versions >= V4.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants)
versions:
version: All versions >= V4.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants)
versions:
version: All versions >= V4.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC MICRO-DRIVE PDC
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC PN/MF Coupler
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC PN/PN Coupler
versions:
version: All versions >= V4.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
versions:
version: All versions < V4.4.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
versions:
version: All versions < V2.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-1500 Software Controller
versions:
version: All versions < V2.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 314C-2 PN/DP
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 315-2 PN/DP
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 315F-2 PN/DP
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 315T-3 PN/DP
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 317-2 PN/DP
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 317F-2 PN/DP
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 317T-3 PN/DP
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 317TF-3 PN/DP
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 319-3 PN/DP
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 319F-3 PN/DP
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-400 H V6 CPU family and below (incl. SIPLUS variants)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC TDC CP51M1
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC TDC CPU555
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC WinAC RTX 2010
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC WinAC RTX F 2010
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS S/G Control Unit w. PROFINET
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS ET 200S IM151-8 PN/DP CPU
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS ET 200S IM151-8F PN/DP CPU
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS NET PN/PN Coupler
versions:
version: All versions >= V4.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS S7-300 CPU 314C-2 PN/DP
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS S7-300 CPU 315-2 PN/DP
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS S7-300 CPU 315F-2 PN/DP
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS S7-300 CPU 317-2 PN/DP
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS S7-300 CPU 317F-2 PN/DP
versions:
version: All versions, status: affected
defaultStatus: unknown
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
baseScore: 7.5
baseSeverity: HIGH
]