Denial of Service Vulnerability in Siemens SIMATIC S7-400 Series
CVE-2018-16557
8.2HIGH
Key Information:
- Vendor
Siemens
- Status
- Vendor
- CVE Published:
- 13 December 2018
What is CVE-2018-16557?
A vulnerability exists in Siemens SIMATIC S7-400 CPUs where an attacker can send specially crafted packets to port 102/tcp via Ethernet, PROFIBUS, or Multi Point Interfaces (MPI). This can result in a denial of service, disrupting the core functionality of the CPU. Recovery may require flashing the CPU with a new firmware image. Successful exploitation does not necessitate user interaction, and if access protections are not configured, it can be exploited without any privileges.
Affected Version(s)
SIMATIC S7-400 CPU 412-1 DP V7 All versions
SIMATIC S7-400 CPU 412-2 DP V7 All versions
SIMATIC S7-400 CPU 414-2 DP V7 All versions