PT-2019-4789 · Siemens · Simatic S7-1500 Cpu

Artem Zinenko · Published 2019-01-08 · Updated 2019-04-18 · CVE-2018-16559

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SIMATIC S7-1500 CPU versions V2.0 through V2.5 SIMATIC S7-1500 CPU versions V1.8.5 and earlier

Description A vulnerability has been identified that could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the device by sending specially crafted network packets to port 80/tcp or 443/tcp. The security vulnerability could be exploited by an attacker with network access to the affected systems on these ports. Successful exploitation requires no system privileges and no user interaction, allowing an attacker to compromise the availability of the device. The vulnerability is related to insufficient input data validation. At the time of advisory publication, no public exploitation of this security vulnerability was known.

Recommendations For SIMATIC S7-1500 CPU versions V2.0 through V2.5, restrict access to ports 80/tcp and 443/tcp to minimize the risk of exploitation. For SIMATIC S7-1500 CPU versions V1.8.5 and earlier, restrict access to ports 80/tcp and 443/tcp to minimize the risk of exploitation. As a temporary workaround, consider implementing network access controls to limit the ability of attackers to send specially crafted network packets to the affected systems.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-01367

CVE-2018-16559

Affected Products

Simatic S7-1500 Cpu

References · 5

• https://cert-portal.siemens.com/productcert/pdf/ssa-180635.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-16559 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-16559 · Security Note
• https://bdu.fstec.ru/vul/2020-01367 · Security Note
• https://us-cert.gov/ics/advisories/ICSA-19-036-04 · Note