PT-2024-7411 · Siemens · Simatic S7-200 Smart Cpu Cr40+3

Published 2024-09-10 · Updated 2024-10-01 · CVE-2024-43647

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All versions) SIMATIC S7-200 SMART CPU CR60 (6ES7288-1CR60-0AA0) (All versions) SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA0) (All versions) SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA1) (All versions) SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA0) (All versions) SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA1) (All versions) SIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA0) (All versions) SIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA1) (All versions) SIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA0) (All versions) SIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA1) (All versions) SIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA0) (All versions) SIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA1) (All versions) SIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA0) (All versions) SIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA1) (All versions) SIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA0) (All versions) SIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA1) (All versions) SIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA0) (All versions) SIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA1) (All versions)

Description: The affected devices do not properly handle TCP packets with an incorrect structure, which could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations, the network cable of the device needs to be unplugged and re-plugged.

Recommendations: To resolve the issue for each affected version, the following steps can be taken: Unplug and re-plug the network cable to restore normal operations. As a temporary workaround, consider restricting access to the device until a patch is available. Avoid using the device in a network environment until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2024-08785

CVE-2024-43647

Affected Products

Simatic S7-200 Smart Cpu Cr40

Simatic S7-200 Smart Cpu Cr60

Simatic S7-200 Smart Cpu Sr20

Simatic S7-200 Smart Cpu Sr30

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2024-43647 · Security Note
• https://bdu.fstec.ru/vul/2024-08785 · Security Note
• https://t.me/latest_high_impact_cve/1129 · Telegram Post
• https://t.me/cvedetector/5213 · Telegram Post
• https://twitter.com/transilienceai/status/1838932926563553679 · Twitter Post
• https://twitter.com/cracbot/status/1835196934329712965 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1833495806881452324 · Twitter Post
• https://twitter.com/cracbot/status/1834834571776725382 · Twitter Post
• https://twitter.com/transilienceai/status/1838591091962188135 · Twitter Post
• https://twitter.com/CVEnew/status/1833443201861947720 · Twitter Post
• https://twitter.com/CveFindCom/status/1833445859800846741 · Twitter Post
• https://twitter.com/transilienceai/status/1839370007983140939 · Twitter Post
• https://cert-portal.siemens.com/productcert/html/ssa-969738.html · Note
• https://twitter.com/transilienceai/status/1840933123715961192 · Twitter Post