PT-2023-15290 · Siemens · Sinamics Sm120+6

Published 2023-12-12 · Updated 2023-12-18 · CVE-2022-47375

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SIMATIC PC-Station Plus versions All SIMATIC S7-400 CPU 412-2 PN V7 versions All SIMATIC S7-400 CPU 414-3 PN/DP V7 versions All SIMATIC S7-400 CPU 414F-3 PN/DP V7 versions All SIMATIC S7-400 CPU 416-3 PN/DP V7 versions All SIMATIC S7-400 CPU 416F-3 PN/DP V7 versions All SINAMICS S120 (incl. SIPLUS variants) versions prior to V5.2 SP3 HF15 SIPLUS S7-400 CPU 414-3 PN/DP V7 versions All SIPLUS S7-400 CPU 416-3 PN/DP V7 versions All

Description The affected products do not handle long file names correctly, which could allow an attacker to create a buffer overflow and create a denial of service condition for the device.

Recommendations For SIMATIC PC-Station Plus, consider implementing input validation to restrict file names to a safe length until a patch is available. For SIMATIC S7-400 CPU 412-2 PN V7, restrict access to file operations to minimize the risk of exploitation. For SIMATIC S7-400 CPU 414-3 PN/DP V7, disable the handling of long file names as a temporary workaround. For SIMATIC S7-400 CPU 414F-3 PN/DP V7, apply configuration changes to limit the impact of a potential buffer overflow. For SIMATIC S7-400 CPU 416-3 PN/DP V7, avoid using file names that could trigger the buffer overflow vulnerability. For SIMATIC S7-400 CPU 416F-3 PN/DP V7, consider restricting file operations to trusted sources. For SINAMICS S120 (incl. SIPLUS variants), update to version V5.2 SP3 HF15 or later to resolve the issue. For SIPLUS S7-400 CPU 414-3 PN/DP V7, implement additional security measures to prevent exploitation. For SIPLUS S7-400 CPU 416-3 PN/DP V7, apply a patch or update as soon as one becomes available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-805

Related Identifiers

CVE-2022-47375

Affected Products

Simatic Pc-Station Plus

Simatic S7-400 Cpu 412-2 Pn V7

Simatic S7-400 Cpu 414F-3 Pn/Dp V7

Simatic S7-400 Cpu 416-3 Pn/Dp V7

Sinamics Sm120

Siplus S7-400 Cpu 414-3 Pn/Dp V7

Siplus S7-400 Cpu 416-3 Pn/Dp V7

References · 4

• https://cert-portal.siemens.com/productcert/pdf/ssa-892915.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47375 · Security Note
• https://osv.dev/vulnerability/CVE-2022-47375 · Vendor Advisory
• https://twitter.com/CVEnew/status/1734537936123707788 · Twitter Post