PT-2022-2054 · Siemens · Siplus Tim 1531 Irc+7

Published 2022-02-08 · Updated 2023-04-11 · CVE-2021-37205

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SIMATIC Drive Controller family versions 2.9.2 through 2.9.4 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 versions 21.9 through 21.9.4 SIMATIC S7-1200 CPU family versions 4.5.0 through 4.5.2 SIMATIC S7-1500 CPU family versions 2.9.2 through 2.9.4 SIMATIC S7-1500 Software Controller versions 21.9 through 21.9.4 SIMATIC S7-PLCSIM Advanced versions 4.0 through 4.0 SP1 SIPLUS TIM 1531 IRC versions prior to 2.3.6 TIM 1531 IRC versions prior to 2.3.6

Description The issue is related to improper memory deallocation before removing the last reference, which can be exploited by a remote attacker to cause a denial-of-service condition in a PLC when sending specially prepared packets over port 102/tcp. A restart of the affected device is needed to restore normal operations.

Recommendations For SIMATIC Drive Controller family versions 2.9.2 through 2.9.4, update to version 2.9.4 or later. For SIMATIC ET 200SP Open Controller CPU 1515SP PC2 versions 21.9 through 21.9.4, update to version 21.9.4 or later. For SIMATIC S7-1200 CPU family versions 4.5.0 through 4.5.2, update to version 4.5.2 or later. For SIMATIC S7-1500 CPU family versions 2.9.2 through 2.9.4, update to version 2.9.4 or later. For SIMATIC S7-1500 Software Controller versions 21.9 through 21.9.4, update to version 21.9.4 or later. For SIMATIC S7-PLCSIM Advanced versions 4.0 through 4.0 SP1, update to version 4.0 SP1 or later. For SIPLUS TIM 1531 IRC versions prior to 2.3.6, update to version 2.3.6 or later. For TIM 1531 IRC versions prior to 2.3.6, update to version 2.3.6 or later.

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2022-01713

CVE-2021-37205

Affected Products

Simatic Drive Controller

Simatic Et 200Sp Open Controller Cpu 1515Sp Pc2

Simatic S7-1200 Cpu

Simatic S7-1500 Cpu

Simatic S7-1500 Software Controller

Simatic S7-Plcsim Advanced

Siplus Tim 1531 Irc

Tim 1531 Irc

References · 8

• https://bdu.fstec.ru/vul/2022-01713 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-838121.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-37205 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37205 · Security Note
• https://t.me/true_secator/2622 · Telegram Post
• https://t.me/cibsecurity/37082 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsa-22-041-01 · Note
• https://cybersecurity-help.cz/vdb/SB2022021105 · Note