Denial-of-Service Vulnerability in Siemens SIMATIC S7-400 Series
CVE-2021-40368
7.5HIGH
Key Information:
- Vendor
Siemens
- Status
- Vendor
- CVE Published:
- 12 April 2022
What is CVE-2021-40368?
A vulnerability has been found in the Siemens SIMATIC S7-400 product line that allows an attacker to send specially crafted packets to port 102/tcp. This improper handling of packets could lead to a Denial-of-Service situation, requiring a manual restart of the affected devices to restore normal operation. Users of the affected products are encouraged to implement security measures to mitigate potential disruptions.
Affected Version(s)
SIMATIC S7-400 CPU 412-1 DP V7 All versions
SIMATIC S7-400 CPU 412-2 DP V7 All versions
SIMATIC S7-400 CPU 412-2 PN/DP V7 All versions < V7.0.3