Skip to content
fr Sign in
7.5 High

CVE-2021-37204 A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller…

Description

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 Ready4Linux (All versions), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 < V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 < V2.9.4), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-1500 Software Controller (All versions >= V21.9 < V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packet over port 102/tcp. A restart of the affected device is needed to restore normal operations.

Affected products and versions

Product Affected versions Fixed in
SIMATIC Drive Controller family Versions not published
SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) Versions not published
SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) Versions not published
SIMATIC ET 200SP Open Controller CPU 1515SP PC2 Ready4Linux Versions not published
SIMATIC S7-1200 CPU family (incl. SIPLUS variants) Versions not published
SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) Versions not published
SIMATIC S7-1500 Software Controller Versions not published
SIMATIC S7-PLCSIM Advanced Versions not published
SIPLUS TIM 1531 IRC Versions not published
Show the other branch
Product Affected versions Fixed in
TIM 1531 IRC Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SIMATIC Drive Controller family

The 7 CVEs of SIMATIC Drive Controller family →
CVE-2022-38465 A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open… 9.3 Critical CVE-2021-37205 A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET… 7.5 High CVE-2021-37185 A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET… 7.5 High CVE-2020-28397 A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open… Not rated
Track this CVE