Multiple vulnerabilities in Siemens Industrial Products
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 4 |
| CVE-ID | CVE-2021-40365 CVE-2021-44693 CVE-2021-44694 CVE-2021-44695 |
| CWE-ID | CWE-20 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software Subscribe |
SIMATIC ET 200SP Open Controller CPU 1515SP PC2 Server applications / SCADA systems SIMATIC S7-PLCSIM Advanced Server applications / SCADA systems SIMATIC S7-1500 Hardware solutions / Firmware TIM 1531 IRC Hardware solutions / Firmware SIPLUS TIM 1531 IRC Hardware solutions / Firmware SIMATIC Drive Controller Hardware solutions / Firmware SIMATIC S7-1200 CPU family Hardware solutions / Firmware SIMATIC S7-1500 CPU Hardware solutions / Firmware |
| Vendor | Siemens |
Security Bulletin
This security bulletin contains information about 4 vulnerabilities.
1) Input validation error
EUVDB-ID: #VU70373
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-40365
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's website.
Vulnerable software versionsSIMATIC ET 200SP Open Controller CPU 1515SP PC2: All versions
SIMATIC S7-1500: All versions
TIM 1531 IRC: All versions
SIPLUS TIM 1531 IRC: All versions
SIMATIC Drive Controller: before 3.0.1
SIMATIC S7-1200 CPU family: before 4.6.0
SIMATIC S7-1500 CPU: before 3.0.1
SIMATIC S7-PLCSIM Advanced: before 5.0
External linkshttp://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Input validation error
EUVDB-ID: #VU70374
Risk: Low
CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-44693
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input. A remote administrator can pass specially crafted input to the application and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's website.
Vulnerable software versionsSIMATIC ET 200SP Open Controller CPU 1515SP PC2: All versions
SIMATIC S7-1500: All versions
TIM 1531 IRC: All versions
SIPLUS TIM 1531 IRC: All versions
SIMATIC Drive Controller: before 3.0.1
SIMATIC S7-1200 CPU family: before 4.6.0
SIMATIC S7-1500 CPU: before 3.0.1
SIMATIC S7-PLCSIM Advanced: before 5.0
External linkshttp://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Input validation error
EUVDB-ID: #VU70375
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-44694
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input. A remote administrator can pass specially crafted input to the application and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's website.
Vulnerable software versionsSIMATIC ET 200SP Open Controller CPU 1515SP PC2: All versions
SIMATIC S7-1500: All versions
TIM 1531 IRC: All versions
SIPLUS TIM 1531 IRC: All versions
SIMATIC Drive Controller: before 3.0.1
SIMATIC S7-1200 CPU family: before 4.6.0
SIMATIC S7-1500 CPU: before 3.0.1
SIMATIC S7-PLCSIM Advanced: before 5.0
External linkshttp://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Input validation error
EUVDB-ID: #VU70376
Risk: Low
CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-44695
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input. A remote administrator can pass specially crafted input to the application and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's website.
Vulnerable software versionsSIMATIC ET 200SP Open Controller CPU 1515SP PC2: All versions
SIMATIC S7-1500: All versions
TIM 1531 IRC: All versions
SIPLUS TIM 1531 IRC: All versions
SIMATIC Drive Controller: before 3.0.1
SIMATIC S7-1200 CPU family: before 4.6.0
SIMATIC S7-1500 CPU: before 3.0.1
SIMATIC S7-PLCSIM Advanced: before 5.0
External linkshttp://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
