PT-2022-12205 · Siemens · Simatic Et 200Sp Open Controller Cpu 1515Sp Pc2+10

Published 2022-12-13 · Updated 2023-09-12 · CVE-2021-44694

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions SIMATIC Drive Controller family versions (affected versions not specified) SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) versions (affected versions not specified) SIMATIC S7-1200 CPU family (incl. SIPLUS variants) versions (affected versions not specified) SIMATIC S7-1500 CPU 1510SP F-1 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1510SP-1 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1511-1 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1511F-1 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1511C-1 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1511T-1 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1511TF-1 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1512C-1 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1512SP F-1 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1512SP-1 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1513-1 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1513F-1 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1513R-1 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1515-2 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1515F-2 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1515R-2 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1515T-2 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1515TF-2 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1516-3 PN/DP versions (affected versions not specified) SIMATIC S7-1500 CPU 1516F-3 PN/DP versions (affected versions not specified) SIMATIC S7-1500 CPU 1516T-3 PN/DP versions (affected versions not specified) SIMATIC S7-1500 CPU 1516TF-3 PN/DP versions (affected versions not specified) SIMATIC S7-1500 CPU 1517-3 PN/DP versions (affected versions not specified) SIMATIC S7-1500 CPU 1517F-3 PN/DP versions (affected versions not specified) SIMATIC S7-1500 CPU 1517H-3 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1517T-3 PN/DP versions (affected versions not specified) SIMATIC S7-1500 CPU 1517TF-3 PN/DP versions (affected versions not specified) SIMATIC S7-1500 CPU 1518-4 PN/DP versions (affected versions not specified) SIMATIC S7-1500 CPU 1518-4 PN/DP MFP versions (affected versions not specified) SIMATIC S7-1500 CPU 1518F-4 PN/DP versions (affected versions not specified) SIMATIC S7-1500 CPU 1518HF-4 PN versions (affected versions not specified) SIMATIC S7-1500 CPU 1518T-4 PN/DP versions (affected versions not specified) SIMATIC S7-1500 CPU 1518TF-4 PN/DP versions (affected versions not specified) SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK versions (affected versions not specified) SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK versions (affected versions not specified) SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN versions (affected versions not specified) SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN versions (affected versions not specified) SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN versions (affected versions not specified) SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN versions (affected versions not specified) SIMATIC S7-1500 Software Controller versions (affected versions not specified) SIMATIC S7-PLCSIM Advanced versions (affected versions not specified) SIPLUS ET 200SP CPU 1510SP F-1 PN versions (affected versions not specified) SIPLUS ET 200SP CPU 1510SP-1 PN versions (affected versions not specified) SIPLUS ET 200SP CPU 1512SP F-1 PN versions (affected versions not specified) SIPLUS ET 200SP CPU 1512SP-1 PN versions (affected versions not specified) SIPLUS S7-1500 CPU 1511-1 PN versions (affected versions not specified) SIPLUS S7-1500 CPU 1511F-1 PN versions (affected versions not specified) SIPLUS S7-1500 CPU 1513-1 PN versions (affected versions not specified) SIPLUS S7-1500 CPU 1513F-1 PN versions (affected versions not specified) SIPLUS S7-1500 CPU 1515F-2 PN versions (affected versions not specified) SIPLUS S7-1500 CPU 1515R-2 PN versions (affected versions not specified) SIPLUS S7-1500 CPU 1516-3 PN/DP versions (affected versions not specified) SIPLUS S7-1500 CPU 1516F-3 PN/DP versions (affected versions not specified) SIPLUS S7-1500 CPU 1517H-3 PN versions (affected versions not specified) SIPLUS S7-1500 CPU 1518-4 PN/DP versions (affected versions not specified) SIPLUS S7-1500 CPU 1518F-4 PN/DP versions (affected versions not specified) SIPLUS S7-1500 CPU 1518HF-4 PN versions (affected versions not specified) SIPLUS TIM 1531 IRC versions (affected versions not specified) TIM 1531 IRC versions (affected versions not specified)

Description Affected devices do not process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial-of-service in the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-1287

CWE-20

Related Identifiers

CVE-2021-44694

Affected Products

Simatic Drive Controller

Simatic Et 200Sp Open Controller Cpu 1515Sp Pc2

Simatic S7-1200 Cpu

Simatic S7-1500 Cpu

Simatic S7-1500 Et 200Pro

Simatic S7-1500 Software Controller

Simatic S7-Plcsim Advanced

Siplus Et 200Sp Cpu

Siplus S7-1500 Cpu

Siplus Tim 1531 Irc

Tim 1531 Irc

References · 4

• https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-44694 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44694 · Security Note
• https://t.me/cvenotify/43691 · Telegram Post