Network Accessibility Vulnerability in Siemens SIMATIC S7-300 & SINUMERIK Products
CVE-2019-18336

7.5HIGH

Key Information:

Vendor
Siemens
Status
Simatic S7-300 Cpu Family (incl. Related Et200 Cpus And Siplus Variants)
Simatic Tdc Cp51m1
Simatic Tdc Cpu555
Sinumerik 840d Sl
Vendor
CVE Published:
10 March 2020

Summary

A vulnerability exists in Siemens SIMATIC S7-300 CPU family and related products, allowing specially crafted packets to be sent to port 102/tcp (Profinet). This can trigger the devices to enter defect mode, requiring a restart for recovery. The exploit does not necessitate user interaction and only requires network access to the specific port. At the time of the advisory, no known public exploitation had been reported.

Affected Version(s)

SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) All versions < V3.X.17

SIMATIC TDC CP51M1 All versions < V1.1.8

SIMATIC TDC CPU555 All versions < V1.1.1

References

https://cert-portal.siemens.com/productcert/pdf/ssa-50898...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.