PT-2021-11122 · Siemens · Simatic Cp 343-1 Advanced+2

Published 2021-05-12 · Updated 2021-12-03 · CVE-2020-25242

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (All versions) SIMATIC NET CP 343-1 Lean (incl. SIPLUS variants) (All versions) SIMATIC NET CP 343-1 Standard (incl. SIPLUS variants) (All versions)

Description: A Denial-of-Service condition can be triggered on the affected devices by sending specially crafted packets to TCP port 102. This may require a cold restart to recover.

Recommendations: For SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants), restrict access to TCP port 102 until a fix is available. For SIMATIC NET CP 343-1 Lean (incl. SIPLUS variants), consider implementing network segmentation to limit the attack surface. For SIMATIC NET CP 343-1 Standard (incl. SIPLUS variants), avoid exposing the device to untrusted networks to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2020-25242

Affected Products

Simatic Cp 343-1 Advanced

Simatic Cp 343-1 Lean

Simatic Net Cp 343-1 Standard

References · 3

• https://cert-portal.siemens.com/productcert/pdf/ssa-676775.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25242 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsa-21-131-07 · Note