7.5
High
CVE-2021-40365 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an…
Description
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SIMATIC Drive Controller CPU 1504D TF | Versions not published | |
| SIMATIC Drive Controller CPU 1507D TF | Versions not published | |
| SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) | Versions not published | |
| SIMATIC S7-1200 CPU family (incl. SIPLUS variants) | Versions not published | |
| SIMATIC S7-1500 CPU 1510SP F-1 PN | Versions not published | |
| SIMATIC S7-1500 CPU 1510SP-1 PN | Versions not published | |
| SIMATIC S7-1500 CPU 1511-1 PN | Versions not published | |
| SIMATIC S7-1500 CPU 1511C-1 PN | Versions not published | |
| SIMATIC S7-1500 CPU 1511F-1 PN | Versions not published |
Show the 68 other branches Hide the 68 other branches
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SIMATIC Drive Controller CPU 1504D TF
The 24 CVEs of SIMATIC Drive Controller CPU 1504D TF →
CVE-2026-63357
Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before…
6.1
Medium
CVE-2026-63356
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including…
6.1
Medium
CVE-2026-63355
Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in…
6.1
Medium
CVE-2026-63354
Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before…
9.6
Critical