description: The webserver of the affected devices contains a vulnerability that may lead to
a denial of service condition. An attacker may cause a denial of service
situation which leads to a restart of the webserver of the affected device.
The security vulnerability could be exploited by an attacker with network
access to the affected systems. Successful exploitation requires no system
privileges and no user interaction. An attacker could use the vulnerability
to compromise availability of the device.
problem types: CWE-125: Out-of-bounds Read
affected:
{
vendor: Siemens
product: SIMATIC CP 1604
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC CP 1616
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC CP 343-1 Advanced
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC CP 443-1
versions:
version: All versions < V3.3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC CP 443-1
versions:
version: All versions < V3.3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC CP 443-1 Advanced
versions:
version: All versions < V3.3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC CP 443-1 OPC UA
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET 200pro IM154-8 PN/DP CPU
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET 200pro IM154-8F PN/DP CPU
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET 200pro IM154-8FX PN/DP CPU
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET 200S IM151-8 PN/DP CPU
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET 200S IM151-8F PN/DP CPU
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
versions:
version: All versions < V2.1.6, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
versions:
version: All versions < V2.7, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
versions:
version: All versions < V15.1 Upd4, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
versions:
version: All versions < V15.1 Upd4, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
versions:
version: All versions < V15.1 Upd4, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC IPC DiagMonitor
versions:
version: All versions < V5.1.3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC RF182C
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC RF185C
versions:
version: All versions < V1.1.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC RF186C
versions:
version: All versions < V1.1.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC RF188C
versions:
version: All versions < V1.1.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC RF600R family
versions:
version: All versions < V3.2.1, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC RFID 181EIP
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
versions:
version: All versions < V2.6.1, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-1500 Software Controller
versions:
version: All versions < V2.7, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 314C-2 PN/DP
versions:
version: All versions < V3.3.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 315-2 PN/DP
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 315F-2 PN/DP
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 315T-3 PN/DP
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 317-2 PN/DP
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 317F-2 PN/DP
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 317T-3 PN/DP
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 317TF-3 PN/DP
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 319-3 PN/DP
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-300 CPU 319F-3 PN/DP
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC S7-PLCSIM Advanced
versions:
version: All versions < V2.0 SP1 UPD1, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC Teleservice Adapter IE Advanced
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC Teleservice Adapter IE Basic
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC Teleservice Adapter IE Standard
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC WinAC RTX 2010
versions:
version: All versions < V2010 SP3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC WinAC RTX F 2010
versions:
version: All versions < V2010 SP3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC WinCC Runtime Advanced
versions:
version: All versions < V15.1 Upd4, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants)
versions:
version: All versions < V1.1.3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMOCODE pro V PROFINET (incl. SIPLUS variants)
versions:
version: All versions < V2.1.3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS G130 V4.6 Control Unit
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS G130 V4.7 Control Unit
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS G130 V4.7 SP1 Control Unit
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS G130 V4.8 Control Unit
versions:
version: All versions < V4.8 HF6, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS G130 V5.1 Control Unit
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS G130 V5.1 SP1 Control Unit
versions:
version: All versions < V5.1 SP1 HF4, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS G150 V4.6 Control Unit
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS G150 V4.7 Control Unit
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS G150 V4.7 SP1 Control Unit
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS G150 V4.8 Control Unit
versions:
version: All versions < V4.8 HF6, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS G150 V5.1 Control Unit
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS G150 V5.1 SP1 Control Unit
versions:
version: All versions < V5.1 SP1 HF4, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS GH150 V4.7 (Control Unit)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS GH150 V4.8 (Control Unit)
versions:
version: All versions < V4.8 SP2 HF9, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS GL150 V4.7 (Control Unit)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS GL150 V4.8 (Control Unit)
versions:
version: All versions < V4.8 SP2 HF9, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS GM150 V4.7 (Control Unit)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS GM150 V4.8 (Control Unit)
versions:
version: All versions < V4.8 SP2 HF9, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS S120 V4.6 Control Unit (incl. SIPLUS variants)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS S120 V4.7 SP1 Control Unit (incl. SIPLUS variants)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS S120 V4.8 Control Unit (incl. SIPLUS variants)
versions:
version: All versions < V4.8 HF6, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS S120 V5.1 Control Unit (incl. SIPLUS variants)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS S120 V5.1 SP1 Control Unit (incl. SIPLUS variants)
versions:
version: All versions < V5.1 SP1 HF4, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS S150 V4.6 Control Unit
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS S150 V4.7 Control Unit
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS S150 V4.7 SP1 Control Unit
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS S150 V4.8 Control Unit
versions:
version: All versions < V4.8 HF6, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS S150 V5.1 Control Unit
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS S150 V5.1 SP1 Control Unit
versions:
version: All versions < V5.1 SP1 HF4, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS S210
versions:
version: All versions < V5.1 SP1 HF8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS SL150 V4.7 (Control Unit)
versions:
version: All versions < V4.7 HF33, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS SL150 V4.8 (Control Unit)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS SM120 V4.7 (Control Unit)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS SM120 V4.8 (Control Unit)
versions:
version: All versions < V4.8 SP2 HF10, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SINAMICS SM150 V4.8 (Control Unit)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS ET 200S IM151-8 PN/DP CPU
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS ET 200S IM151-8F PN/DP CPU
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS NET CP 343-1 Advanced
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS NET CP 443-1
versions:
version: All versions < V3.3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS NET CP 443-1 Advanced
versions:
version: All versions < V3.3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS S7-300 CPU 314C-2 PN/DP
versions:
version: All versions < V3.3.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS S7-300 CPU 315-2 PN/DP
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS S7-300 CPU 315F-2 PN/DP
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS S7-300 CPU 317-2 PN/DP
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS S7-300 CPU 317F-2 PN/DP
versions:
version: All versions < V3.2.16, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SITOP Manager
versions:
version: All versions < V1.1, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SITOP PSU8600
versions:
version: All versions < V1.5, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SITOP UPS1600 (incl. SIPLUS variants)
versions:
version: All versions < V2.3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: TIM 1531 IRC (incl. SIPLUS NET variants)
versions:
version: All versions < V2.1, status: affected
defaultStatus: unknown
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
baseScore: 7.5
baseSeverity: HIGH
]