description: Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.
problem types: CWE-400: Uncontrolled Resource Consumption
affected:
{
product: Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
vendor: Siemens
versions:
status: affected, version: All versions < V4.1.1 Patch04
}
{
product: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
vendor: Siemens
versions:
status: affected, version: All versions < V4.2.1 Patch03
}
{
product: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P
vendor: Siemens
versions:
status: affected, version: All versions < V4.4.0 Patch01
}
{
product: Extension Unit 12" PROFINET
vendor: Siemens
versions:
status: affected, version: All versions < V01.01.01
}
{
product: Extension Unit 15" PROFINET
vendor: Siemens
versions:
status: affected, version: All versions < V01.01.01
}
{
product: Extension Unit 19" PROFINET
vendor: Siemens
versions:
status: affected, version: All versions < V01.01.01
}
{
product: Extension Unit 22" PROFINET
vendor: Siemens
versions:
status: affected, version: All versions < V01.01.01
}
{
product: IE/AS-i Link PN IO
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: IE/PB-Link (incl. SIPLUS NET variants)
vendor: Siemens
versions:
status: affected, version: All versions < V3.0
}
{
product: SCALANCE M-800 / S615
vendor: Siemens
versions:
status: affected, version: All versions < V4.03
}
{
product: SCALANCE W700
vendor: Siemens
versions:
status: affected, version: All versions < V6.1
}
{
product: SCALANCE X-200 switch family (incl. SIPLUS NET variants)
vendor: Siemens
versions:
status: affected, version: All versions < V5.2.2
}
{
product: SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
vendor: Siemens
versions:
status: affected, version: All versions < V5.4.0
}
{
product: SCALANCE X-300 switch family (incl. SIPLUS NET variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.1.0
}
{
product: SCALANCE X408
vendor: Siemens
versions:
status: affected, version: All versions < V4.1.0
}
{
product: SCALANCE X414
vendor: Siemens
versions:
status: affected, version: All versions < V3.10.2
}
{
product: SCALANCE XM-400 Family
vendor: Siemens
versions:
status: affected, version: All versions < V6.1
}
{
product: SCALANCE XR-500 Family
vendor: Siemens
versions:
status: affected, version: All versions < V6.1
}
{
product: SIMATIC CM 1542-1
vendor: Siemens
versions:
status: affected, version: All versions < V2.0
}
{
product: SIMATIC CM 1542SP-1
vendor: Siemens
versions:
status: affected, version: All versions < V1.0.15
}
{
product: SIMATIC CP 1242-7 GPRS V2
vendor: Siemens
versions:
status: affected, version: All versions < V2.1.82
}
{
product: SIMATIC CP 1243-1 (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V2.1.82
}
{
product: SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC CP 1243-1 IRC (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V2.1.82
}
{
product: SIMATIC CP 1243-7 LTE/US
vendor: Siemens
versions:
status: affected, version: All versions < V2.1.82
}
{
product: SIMATIC CP 1243-8
vendor: Siemens
versions:
status: affected, version: All versions < V2.1.82
}
{
product: SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V1.0.15
}
{
product: SIMATIC CP 1543-1 (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V2.1
}
{
product: SIMATIC CP 1543SP-1 (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V1.0.15
}
{
product: SIMATIC CP 1604
vendor: Siemens
versions:
status: affected, version: All versions < V2.7
}
{
product: SIMATIC CP 1616
vendor: Siemens
versions:
status: affected, version: All versions < V2.7
}
{
product: SIMATIC CP 1626
vendor: Siemens
versions:
status: affected, version: All versions < V1.1
}
{
product: SIMATIC CP 343-1 (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V3.1.3
}
{
product: SIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC CP 343-1 Lean (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V3.1.3
}
{
product: SIMATIC CP 443-1 (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V3.2.17
}
{
product: SIMATIC CP 443-1 Advanced (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V3.2.17
}
{
product: SIMATIC CP 443-1 OPC UA
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC DK-16xx PN IO
vendor: Siemens
versions:
status: affected, version: All versions < V2.7
}
{
product: SIMATIC ET200AL
vendor: Siemens
versions:
status: affected, version: All versions < V1.0.2
}
{
product: SIMATIC ET200M (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200MP IM155-5 PN BA (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.0.1
}
{
product: SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.2
}
{
product: SIMATIC ET200MP IM155-5 PN ST (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.1
}
{
product: SIMATIC ET200S (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200SP (incl. SIPLUS variants, except IM155-6 PN ST and IM155-6 PN HF)
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < 4.2.0
}
{
product: SIMATIC ET200SP IM155-6 PN HS (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.0.1
}
{
product: SIMATIC ET200SP IM155-6 PN ST (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.1.0
}
{
product: SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 4AO U/I 4xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200ecoPN: IO-Link Master
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC ET200pro
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V15.1
}
{
product: SIMATIC MV400 family
vendor: Siemens
versions:
status: affected, version: All Versions < V7.0.6
}
{
product: SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.0
}
{
product: SIMATIC RF650R
vendor: Siemens
versions:
status: affected, version: All versions < V3.0
}
{
product: SIMATIC RF680R
vendor: Siemens
versions:
status: affected, version: All versions < V3.0
}
{
product: SIMATIC RF685R
vendor: Siemens
versions:
status: affected, version: All versions < V3.0
}
{
product: SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.2.1
}
{
product: SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V2.1
}
{
product: SIMATIC S7-1500 Software Controller (incl. F)
vendor: Siemens
versions:
status: affected, version: All versions < V2.1
}
{
product: SIMATIC S7-200 SMART
vendor: Siemens
versions:
status: affected, version: All versions < V2.3
}
{
product: SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V3.X.14
}
{
product: SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V6.0.7
}
{
product: SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V6.0.6
}
{
product: SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V7.0.2
}
{
product: SIMATIC S7-410 CPU family (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V8.2
}
{
product: SIMATIC TDC CP51M1
vendor: Siemens
versions:
status: affected, version: All versions < V1.1.8
}
{
product: SIMATIC TDC CPU555
vendor: Siemens
versions:
status: affected, version: All versions < V1.1.1
}
{
product: SIMATIC Teleservice Adapter IE Advanced
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC Teleservice Adapter IE Basic
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC Teleservice Adapter IE Standard
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC WinAC RTX (F) 2010
vendor: Siemens
versions:
status: affected, version: All versions < SIMATIC WinAC RTX 2010 SP3
}
{
product: SIMOCODE pro V PN (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V2.0.0
}
{
product: SIMOTION (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.5 HF1
}
{
product: SIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.4 HF26
}
{
product: SINAMICS DCM w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V1.4 SP1 HF5
}
{
product: SINAMICS DCP w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V1.2 HF1
}
{
product: SINAMICS G110M w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 SP6 HF3
}
{
product: SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 SP6 HF3
}
{
product: SINAMICS G130 V4.7 w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 HF27
}
{
product: SINAMICS G130 V4.8 w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V4.8 HF4
}
{
product: SINAMICS G150 V4.7 w. PN
vendor: Siemens
versions:
status: affected, version: V4.7: All versions < V4.7 HF27
}
{
product: SINAMICS G150 V4.8 w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V4.8 HF4
}
{
product: SINAMICS GH150 V4.7 w. PROFINET
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 SP5 HF7
}
{
product: SINAMICS GL150 V4.7 w. PROFINET
vendor: Siemens
versions:
status: affected, version: All versions < V4.8 SP2
}
{
product: SINAMICS GM150 V4.7 w. PROFINET
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 HF31
}
{
product: SINAMICS S110 w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V4.4 SP3 HF5
}
{
product: SINAMICS S120 V4.7 SP1 w. PN (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SINAMICS S120 V4.7 w. PN (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 HF27
}
{
product: SINAMICS S120 V4.8 w. PN (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.8 HF4
}
{
product: SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.7
}
{
product: SINAMICS S150 V4.7 w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 HF27
}
{
product: SINAMICS S150 V4.8 w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V4.8 HF4
}
{
product: SINAMICS SL150 V4.7.0 w. PROFINET
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 HF30
}
{
product: SINAMICS SL150 V4.7.4 w. PROFINET
vendor: Siemens
versions:
status: affected, version: All versions < V4.8 SP2
}
{
product: SINAMICS SL150 V4.7.5 w. PROFINET
vendor: Siemens
versions:
status: affected, version: All versions < V4.8 SP2
}
{
product: SINAMICS SM120 V4.7 w. PROFINET
vendor: Siemens
versions:
status: affected, version: All versions < V4.8 SP2
}
{
product: SINAMICS V90 w. PN
vendor: Siemens
versions:
status: affected, version: All versions < V1.01
}
{
product: SINUMERIK 828D V4.5 and prior
vendor: Siemens
versions:
status: affected, version: All versions < V4.5 SP6 HF2
}
{
product: SINUMERIK 828D V4.7
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 SP4 HF1
}
{
product: SINUMERIK 840D sl V4.5 and prior
vendor: Siemens
versions:
status: affected, version: All versions < V4.5 SP6 HF2
}
{
product: SINUMERIK 840D sl V4.7
vendor: Siemens
versions:
status: affected, version: All versions < V4.7 SP4 HF1
}
{
product: SIRIUS ACT 3SU1 interface module PROFINET
vendor: Siemens
versions:
status: affected, version: All versions < V1.1.0
}
{
product: SIRIUS Motor Starter M200D PROFINET
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIRIUS Soft Starter 3RW44 PN
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SITOP PSU8600 PROFINET
vendor: Siemens
versions:
status: affected, version: All versions < V1.2.0
}
{
product: SITOP UPS1600 PROFINET (incl. SIPLUS variants)
vendor: Siemens
versions:
status: affected, version: All versions < V2.2.0
}
{
product: Softnet PROFINET IO for PC-based Windows systems
vendor: Siemens
versions:
status: affected, version: All versions < V14 SP1
}
