http://www.securityfocus.com/bid/98369

http://www.securitytracker.com/id/1038463

https://cert-portal.siemens.com/productcert/html/ssa-293562.html

https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf

https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf

Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected. This vulnerability affects only SIMATIC HMI Multi Panels and HMI Mobile Panels, and S7-300/S7-400 devices.

Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.

Siemens AG CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Siemens AG AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Siemens AG https://cert-portal.siemens.com/productcert/html/ssa-293562.html [No types assigned]

NIST CWE-400

NIST CWE-20

Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a Denial-of-Service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected. This vulnerability affects only SIMATIC HMI Multi Panels and HMI Mobile Panels, and S7-300/S7-400 devices.

Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected. This vulnerability affects only SIMATIC HMI Multi Panels and HMI Mobile Panels, and S7-300/S7-400 devices.

Siemens AG CWE-400

Siemens AG CWE-20

NIST AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NIST AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AND
     OR
          *cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:*:*:*:*:*:*:*:* versions up to (including) 4.1.1
     OR
          cpe:2.3:h:siemens:dk_standard_ethernet_controller:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.1.1
          *cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:dk_standard_ethernet_controller:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:ek-ertec_200_pn_io_firmware:*:*:*:*:*:*:*:* versions up to (including) 4.2.1
     OR
          cpe:2.3:h:siemens:ek-ertec_200_pn_io:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:ek-ertec_200_pn_io_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.2.1
          *cpe:2.3:o:siemens:ek-ertec_200_pn_io_firmware:4.2.1:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:ek-ertec_200_pn_io:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:ek-ertec_200p_pn_io_firmware:*:*:*:*:*:*:*:* versions up to (including) 4.4.0
     OR
          cpe:2.3:h:siemens:ek-ertec_200p_pn_io:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:ek-ertec_200p_pn_io_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.4.0
          *cpe:2.3:o:siemens:ek-ertec_200p_pn_io_firmware:4.4.0:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:ek-ertec_200p_pn_io:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:ie\/as-i_link_pn_io_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:ie\/as-i_link_pn_io:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:ie\/as-i_link_pn_io_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:ie\/as-i_link_pn_io:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:ie\/pb-link_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:ie\/pb-link:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:ie\/pb-link_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.0
     OR
          cpe:2.3:h:siemens:ie\/pb-link:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:pn\/pn_coupler_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:pn\/pn_coupler:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:pn\/pn_coupler_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.0
     OR
          cpe:2.3:h:siemens:pn\/pn_coupler:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_m-800_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.03
     OR
          cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_s615_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.03
     OR
          cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_w700_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_w700:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_w700_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 6.1
     OR
          cpe:2.3:h:siemens:scalance_w700:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_x200_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_x200:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_x200_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 5.2.2
     OR
          cpe:2.3:h:siemens:scalance_x200:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_x200_irt_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_x200_irt:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_x200_irt_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 5.4.0
     OR
          cpe:2.3:h:siemens:scalance_x200_irt:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_x300_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_x300:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_x300_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.1.0
     OR
          cpe:2.3:h:siemens:scalance_x300:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_x408_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_x408:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_x408_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.1.0
     OR
          cpe:2.3:h:siemens:scalance_x408:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_x414_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_x414:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_x414_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.10.2
     OR
          cpe:2.3:h:siemens:scalance_x414:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_xm400_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_xm400:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_xm400_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 6.1
     OR
          cpe:2.3:h:siemens:scalance_xm400:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_xr500_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_xr500:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_xr500_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 6.1
     OR
          cpe:2.3:h:siemens:scalance_xr500:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cm_1542-1_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cm_1542-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cm_1542-1_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.0
     OR
          cpe:2.3:h:siemens:simatic_cm_1542-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.1.82
     OR
          cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.0.15
     OR
          cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1543-1_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_1543-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1543-1_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.0.15
     OR
          cpe:2.3:h:siemens:simatic_cp_1543-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1542sp-1_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.0.15
     OR
          cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.1
     OR
          cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1604_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_1604:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1604_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.7
     OR
          cpe:2.3:h:siemens:simatic_cp_1604:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1616_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_1616:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1616_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.7
     OR
          cpe:2.3:h:siemens:simatic_cp_1616:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_343-1_adv_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_343-1_adv:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_343-1_adv_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_343-1_adv:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_343-1_lean_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_343-1_lean:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_343-1_lean_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.1.3
     OR
          cpe:2.3:h:siemens:simatic_cp_343-1_lean:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_343-1_std_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_343-1_std:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_343-1_std_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.1.3
     OR
          cpe:2.3:h:siemens:simatic_cp_343-1_std:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_443-1_adv_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_443-1_adv:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_443-1_adv_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.2.17
     OR
          cpe:2.3:h:siemens:simatic_cp_443-1_adv:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_443-1_opc-ua_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_443-1_opc-ua:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_443-1_opc-ua_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_443-1_opc-ua:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_443-1_std_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_443-1_std:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_443-1_std_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.2.17
     OR
          cpe:2.3:h:siemens:simatic_cp_443-1_std:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_dk-16xx_pn_io_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_dk-16xx_pn_io:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_dk-16xx_pn_io_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.7
     OR
          cpe:2.3:h:siemens:simatic_dk-16xx_pn_io:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200al_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200al:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200al_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.0.2
     OR
          cpe:2.3:h:siemens:simatic_et_200al:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200ecopn_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200ecopn:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200ecopn_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200ecopn:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200m_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200m:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200m_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200m:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200mp_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200mp:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200mp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.0.1
     OR
          cpe:2.3:h:siemens:simatic_et_200mp:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200pro_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200pro:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200pro_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200pro:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200s_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200s:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200s_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200s:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200sp_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200sp:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200sp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.2.0
     OR
          cpe:2.3:h:siemens:simatic_et_200sp:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_hmi_comfort_panels:*:*:*:*:*:*:*:* versions up to (including) -
     OR
          cpe:2.3:h:siemens:simatic_hmi_comfort_panels:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_hmi_comfort_panels:*:*:*:*:*:*:*:* versions up to (excluding) 15.1
     OR
          cpe:2.3:h:siemens:simatic_hmi_comfort_panels:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_hmi_mobile_panels:*:*:*:*:*:*:*:* versions up to (including) -
     OR
          cpe:2.3:h:siemens:simatic_hmi_mobile_panels:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_hmi_mobile_panels:*:*:*:*:*:*:*:* versions up to (excluding) 15.1
     OR
          cpe:2.3:h:siemens:simatic_hmi_mobile_panels:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_hmi_multi_panels:*:*:*:*:*:*:*:* versions up to (including) -
     OR
          cpe:2.3:h:siemens:simatic_hmi_multi_panels:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_hmi_multi_panels:*:*:*:*:*:*:*:* versions up to (excluding) 15.1
     OR
          cpe:2.3:h:siemens:simatic_hmi_multi_panels:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_rf650r_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_rf650r:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_rf650r_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.0
     OR
          cpe:2.3:h:siemens:simatic_rf650r:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_rf680r_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_rf680r:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_rf680r_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.0
     OR
          cpe:2.3:h:siemens:simatic_rf680r:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_rf685r_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_rf685r:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_rf685r_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.0
     OR
          cpe:2.3:h:siemens:simatic_rf685r:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-1200_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_s7-1200:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-1200_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.2.1
     OR
          cpe:2.3:h:siemens:simatic_s7-1200:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-1500_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.1
     OR
          cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-200_smart_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_s7-200_smart:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-200_smart_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.3
     OR
          cpe:2.3:h:siemens:simatic_s7-200_smart:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-300_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_s7-300:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-300_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.3.17
     OR
          cpe:2.3:h:siemens:simatic_s7-300:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-400_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_s7-400:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-400_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 6.0.6
     OR
          cpe:2.3:h:siemens:simatic_s7-400:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_advanced_modem_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_advanced_modem:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_advanced_modem_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_advanced_modem:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_basic_modem_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_basic_modem:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_basic_modem_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_basic_modem:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_teleservice_adapter_standard_modem_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_teleservice_adapter_standard_modem:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_teleservice_adapter_standard_modem_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_teleservice_adapter_standard_modem:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_winac_rtx_2010_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_winac_rtx_2010:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_winac_rtx_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2010
          *cpe:2.3:o:siemens:simatic_winac_rtx_firmware:2010:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_winac_rtx:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simocode_pro_v_profinet_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simocode_pro_v_profinet:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simocode_pro_v_profinet_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.0.0
     OR
          cpe:2.3:h:siemens:simocode_pro_v_profinet:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simotion_firmware:*:*:*:*:*:*:*:* versions up to (including) 4.5
     OR
          cpe:2.3:h:siemens:simotion:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simotion_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.5
          *cpe:2.3:o:siemens:simotion_firmware:4.5:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simotion:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_dcm_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinamics_dcm:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_dcm_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.4
          *cpe:2.3:o:siemens:sinamics_dcm_firmware:1.4:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinamics_dcm:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_dcp_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_dcp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.2
          *cpe:2.3:o:siemens:sinamics_dcp_firmware:1.2:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_g110m_firmware:*:*:*:*:*:*:*:* versions up to (including) 4.7
     OR
          cpe:2.3:h:siemens:sinamics_g110m:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_g110m_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.7
          *cpe:2.3:o:siemens:sinamics_g110m_firmware:4.7:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinamics_g110m:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_g120\(c\/p\/d\)_w._pn_firmware:*:*:*:*:*:*:*:* versions up to (including) 4.7
     OR
          cpe:2.3:h:siemens:sinamics_g120\(c\/p\/d\)_w._pn:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_g120\(c\/p\/d\)_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.7
     OR
          cpe:2.3:h:siemens:sinamics_g120\(c\/p\/d\)_pn:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_g130_firmware:*:*:*:*:*:*:*:* versions up to (including) 4.8
     OR
          cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_g130_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.7
          *cpe:2.3:o:siemens:sinamics_g130_firmware:4.7:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_g150_firmware:*:*:*:*:*:*:*:* versions up to (including) 4.8
     OR
          cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_g150_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.7
          *cpe:2.3:o:siemens:sinamics_g150_firmware:4.7:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics__s110_w._pn_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:_s110_w._pn:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_s110_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.4
          *cpe:2.3:o:siemens:sinamics_s110_pn_firmware:4.4:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinamics_s110_pn:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_s120_firmware:*:*:*:*:*:*:*:* versions up to (including) 4.8
     OR
          cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_s120_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.7
          *cpe:2.3:o:siemens:sinamics_s120_firmware:4.7:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_s150_firmware:*:*:*:*:*:*:*:* versions up to (including) 4.8
     OR
          cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_s150_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.7
          *cpe:2.3:o:siemens:sinamics_s150_firmware:4.7:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_v90_w._pn_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinamics_v90_w._pn:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_v90_pn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.01
     OR
          cpe:2.3:h:siemens:sinamics_v90_pn:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinumerik_828d_firmware:*:*:*:*:*:*:*:* versions up to (including) 4.5
          *cpe:2.3:o:siemens:sinumerik_828d_firmware:*:*:*:*:*:*:*:* versions up to (including) 4.7
     OR
          cpe:2.3:h:siemens:sinumerik_828d:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinumerik_828d_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.5
          *cpe:2.3:o:siemens:sinumerik_828d_firmware:4.5:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinumerik_828d:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:*:*:*:*:*:*:*:* versions up to (including) 4.5
          *cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:*:*:*:*:*:*:*:* versions up to (including) 4.7
     OR
          cpe:2.3:h:siemens:sinumerik_840d_sl:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.5
          *cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:4.5:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinumerik_840d_sl:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sirius_act_3su1_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sirius_act_3su1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sirius_act_3su1_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.1.0
     OR
          cpe:2.3:h:siemens:sirius_act_3su1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sirius_motor_starter_m200d_profinet_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sirius_motor_starter_m200d_profinet:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sirius_motor_starter_m200d_profinet_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sirius_motor_starter_m200d_profinet:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sirius_soft_starter_3rw44_pn_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sirius_soft_starter_3rw44_pn:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sirius_soft_starter_3rw44_pn_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sirius_soft_starter_3rw44_pn:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sitop_psu8600_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sitop_psu8600:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sitop_psu8600_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.2.0
     OR
          cpe:2.3:h:siemens:sitop_psu8600:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:softnet_profinet_io_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:softnet_profinet_io:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:softnet_profinet_io_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 14
          *cpe:2.3:o:siemens:softnet_profinet_io_firmware:14:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:softnet_profinet_io:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:ups1600_profinet_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:ups1600_profinet:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:ups1600_profinet_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.2.0
     OR
          cpe:2.3:h:siemens:ups1600_profinet:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cm_1542sp-1_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.0.15
     OR
          cpe:2.3:h:siemens:simatic_cm_1542sp-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1243-1_irc_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.1.82
     OR
          cpe:2.3:h:siemens:simatic_cp_1243-1_irc:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_tdc_cp51m1_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.1.8
     OR
          cpe:2.3:h:siemens:simatic_tdc_cp51m1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_tdc_cpu555_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.1.1
     OR
          cpe:2.3:h:siemens:simatic_tdc_cpu555:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinumerik_828d_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.7
          *cpe:2.3:o:siemens:sinumerik_828d_firmware:4.7:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinumerik_828d:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.7
          *cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:4.7:-:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinumerik_840d_sl:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:siemens:simatic_s7-1500_software_controller:*:*:*:*:*:*:*:* versions up to (excluding) 2.1

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-1500_software_controller_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_s7-1500_software_controller:-:*:*:*:*:*:*:*

http://www.securitytracker.com/id/1038463 No Types Assigned

http://www.securitytracker.com/id/1038463 Third Party Advisory, VDB Entry

https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf No Types Assigned

https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf Vendor Advisory

https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf Mitigation, Patch, Vendor Advisory

https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf Broken Link

A vulnerability has been identified in SIMATIC CP 343-1 Std (All versions), SIMATIC CP 343-1 Lean (All versions), SIMATIC CP 343-1 Adv (All versions), SIMATIC CP 443-1 Std (All versions < V3.2.17), SIMATIC CP 443-1 Adv (All versions < V3.2.17), SIMATIC CP 443-1 OPC-UA (All versions), SIMATIC CP 1243-1 (All versions < V2.1.82), SIMATIC CP 1243-1 IRC (All versions < V2.1.82), SIMATIC CP 1243-1 IEC (All versions), SIMATIC CP 1243-1 DNP3 (All versions), SIMATIC CM 1542-1 (All versions < V2.0), SIMAT

Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a Denial-of-Service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected. This vulnerability affects only SIMATIC HMI Multi Panels and HMI Mobile Panels, and S7-300/S7-400 devices.

https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf [No Types Assigned]

Siemens AG CWE-20

A vulnerability has been identified in SIMATIC CP 343-1 Std, SIMATIC CP 343-1 Lean, SIMATIC CP 343-1 Adv, SIMATIC CP 443-1 Std, SIMATIC CP 443-1 Adv, SIMATIC CP 443-1 OPC-UA, SIMATIC CP 1243-1, SIMATIC CP 1243-1 IRC, SIMATIC CP 1243-1 IEC, SIMATIC CP 1243-1 DNP3, SIMATIC CM 1542-1, SIMATIC CM 1542SP-1, SIMATIC CP 1542SP-1 IRC, SIMATIC CP 1543SP-1, SIMATIC CP 1543-1, SIMATIC RF650R, SIMATIC RF680R, SIMATIC RF685R, SIMATIC CP 1616, SIMATIC CP 1604, SIMATIC DK-16xx PN IO, SCALANCE X-200, SCALANCE X

A vulnerability has been identified in SIMATIC CP 343-1 Std (All versions), SIMATIC CP 343-1 Lean (All versions), SIMATIC CP 343-1 Adv (All versions), SIMATIC CP 443-1 Std (All versions < V3.2.17), SIMATIC CP 443-1 Adv (All versions < V3.2.17), SIMATIC CP 443-1 OPC-UA (All versions), SIMATIC CP 1243-1 (All versions < V2.1.82), SIMATIC CP 1243-1 IRC (All versions < V2.1.82), SIMATIC CP 1243-1 IEC (All versions), SIMATIC CP 1243-1 DNP3 (All versions), SIMATIC CM 1542-1 (All versions < V2.0), SIMAT

A vulnerability has been identified in Development/Evaluation Kit DK Standard Ethernet Controller, Development/Evaluation Kit EK-ERTEC 200 PN IO, Development/Evaluation Kit EK-ERTEC 200P PN IO, IE/AS-i Link PN IO, IE/PB-Link, SCALANCE M-800, S615, SCALANCE W700, SCALANCE X-200, SCALANCE X-200 IRT, SCALANCE X-300/X408, SCALANCE X414, SCALANCE XM400, SCALANCE XR500, SIMATIC WinAC RTX 2010 incl. F, SIMATIC CM 1542-1, SIMATIC CM 1542SP-1, SIMATIC CP 1243-1, SIMATIC CP 1243-1 DNP3, SIMATIC CP 1243-1 

A vulnerability has been identified in SIMATIC CP 343-1 Std, SIMATIC CP 343-1 Lean, SIMATIC CP 343-1 Adv, SIMATIC CP 443-1 Std, SIMATIC CP 443-1 Adv, SIMATIC CP 443-1 OPC-UA, SIMATIC CP 1243-1, SIMATIC CP 1243-1 IRC, SIMATIC CP 1243-1 IEC, SIMATIC CP 1243-1 DNP3, SIMATIC CM 1542-1, SIMATIC CM 1542SP-1, SIMATIC CP 1542SP-1 IRC, SIMATIC CP 1543SP-1, SIMATIC CP 1543-1, SIMATIC RF650R, SIMATIC RF680R, SIMATIC RF685R, SIMATIC CP 1616, SIMATIC CP 1604, SIMATIC DK-16xx PN IO, SCALANCE X-200, SCALANCE X

A vulnerability has been identified in Development/Evaluation Kit DK Standard Ethernet Controller, Development/Evaluation Kit EK-ERTEC 200 PN IO, Development/Evaluation Kit EK-ERTEC 200P PN IO, IE/AS-i Link PN IO, IE/PB-Link, SCALANCE M-800, S615, SCALANCE W700, SCALANCE X-200, SCALANCE X-200 IRT, SCALANCE X-300/X408, SCALANCE X414, SCALANCE XM400, SCALANCE XR500, SIMATIC WinAC RTX 2010 incl. F, SIMATIC CP 1243-1, SIMATIC CP 1243-1 DNP3, SIMATIC CP 1243-1 IEC, SIMATIC CP 1243-1 IRC, SIMATIC CP 1

A vulnerability has been identified in Development/Evaluation Kit DK Standard Ethernet Controller, Development/Evaluation Kit EK-ERTEC 200 PN IO, Development/Evaluation Kit EK-ERTEC 200P PN IO, IE/AS-i Link PN IO, IE/PB-Link, SCALANCE M-800, S615, SCALANCE W700, SCALANCE X-200, SCALANCE X-200 IRT, SCALANCE X-300/X408, SCALANCE X414, SCALANCE XM400, SCALANCE XR500, SIMATIC WinAC RTX 2010 incl. F, SIMATIC CM 1542-1, SIMATIC CM 1542SP-1, SIMATIC CP 1243-1, SIMATIC CP 1243-1 DNP3, SIMATIC CP 1243-1 

Siemens SIMATIC S7-300 incl. F and T (All versions before V3.X.14), S7-400 PN/DP V6 Incl. F (All versions before V6.0.6), S7-400-H V6 (All versions before V6.0.7), S7-400 PN/DP V7 Incl. F (All versions), S7-410 (All versions before V8.2), SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (All versions) could be affected by a Denial-of-Service condition induced by a specially crafted PROFINET DCP (Layer 2 - Ethernet) packet sent to an affected product.

A vulnerability has been identified in Development/Evaluation Kit DK Standard Ethernet Controller, Development/Evaluation Kit EK-ERTEC 200 PN IO, Development/Evaluation Kit EK-ERTEC 200P PN IO, IE/AS-i Link PN IO, IE/PB-Link, SCALANCE M-800, S615, SCALANCE W700, SCALANCE X-200, SCALANCE X-200 IRT, SCALANCE X-300/X408, SCALANCE X414, SCALANCE XM400, SCALANCE XR500, SIMATIC WinAC RTX 2010 incl. F, SIMATIC CP 1243-1, SIMATIC CP 1243-1 DNP3, SIMATIC CP 1243-1 IEC, SIMATIC CP 1243-1 IRC, SIMATIC CP 1

Siemens SIMATIC S7-300 incl. F and T (All versions before V3.X.14), SIMATIC S7-400 incl. F and H (All versions before V8.2), SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (All versions) could be affected by a Denial-of-Service condition induced by a specially crafted PROFINET DCP (Layer 2 - Ethernet) packet sent to an affected product.

Siemens SIMATIC S7-300 incl. F and T (All versions before V3.X.14), S7-400 PN/DP V6 Incl. F (All versions before V6.0.6), S7-400-H V6 (All versions before V6.0.7), S7-400 PN/DP V7 Incl. F (All versions), S7-410 (All versions before V8.2), SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (All versions) could be affected by a Denial-of-Service condition induced by a specially crafted PROFINET DCP (Layer 2 - Ethernet) packet sent to an affected product.

http://www.securitytracker.com/id/1038463 [No Types Assigned]

Siemens SIMATIC S7-300 incl. F and T (All versions before V3.X.14), SIMATIC S7-400 incl. F and H (All versions), SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (All versions) could be affected by a Denial-of-Service condition induced by a specially crafted PROFINET DCP (Layer 2 - Ethernet) packet sent to an affected product.

Siemens SIMATIC S7-300 incl. F and T (All versions before V3.X.14), SIMATIC S7-400 incl. F and H (All versions before V8.2), SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (All versions) could be affected by a Denial-of-Service condition induced by a specially crafted PROFINET DCP (Layer 2 - Ethernet) packet sent to an affected product.

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

(AV:A/AC:L/Au:N/C:N/I:N/A:C)

CWE-20

AND
     OR
          *cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:*:*:*:*:*:*:* (and previous)
     OR
          cpe:2.3:h:siemens:dk_standard_ethernet_controller:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:ek-ertec_200_pn_io_firmware:4.2.1:*:*:*:*:*:*:* (and previous)
     OR
          cpe:2.3:h:siemens:ek-ertec_200_pn_io:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:ek-ertec_200p_pn_io_firmware:4.4.0:*:*:*:*:*:*:* (and previous)
     OR
          cpe:2.3:h:siemens:ek-ertec_200p_pn_io:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:ie\/as-i_link_pn_io_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:ie\/as-i_link_pn_io:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:ie\/pb-link_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:ie\/pb-link:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:pn\/pn_coupler_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:pn\/pn_coupler:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_m-800_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_s615_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_w700_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_w700:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_x200_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_x200:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_x200_irt_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_x200_irt:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_x300_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_x300:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_x408_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_x408:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_x414_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_x414:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_xm400_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_xm400:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_xr500_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:scalance_xr500:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cm_1542-1_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cm_1542-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1542sp-1_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1543-1_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_1543-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1604_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_1604:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_1616_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_1616:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_343-1_adv_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_343-1_adv:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_343-1_lean_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_343-1_lean:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_343-1_std_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_343-1_std:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_443-1_adv_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_443-1_adv:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_443-1_opc-ua_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_443-1_opc-ua:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_cp_443-1_std_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_cp_443-1_std:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_dk-16xx_pn_io_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_dk-16xx_pn_io:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200al_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200al:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200ecopn_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200ecopn:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200m_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200m:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200mp_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200mp:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200pro_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200pro:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200s_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200s:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_et_200sp_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_et_200sp:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_hmi_comfort_panels:-:*:*:*:*:*:*:* (and previous)
     OR
          cpe:2.3:h:siemens:simatic_hmi_comfort_panels:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_hmi_mobile_panels:-:*:*:*:*:*:*:* (and previous)
     OR
          cpe:2.3:h:siemens:simatic_hmi_mobile_panels:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_hmi_multi_panels:-:*:*:*:*:*:*:* (and previous)
     OR
          cpe:2.3:h:siemens:simatic_hmi_multi_panels:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_rf650r_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_rf650r:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_rf680r_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_rf680r:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_rf685r_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_rf685r:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-1200_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_s7-1200:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-1500_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-1500_software_controller_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_s7-1500_software_controller:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-200_smart_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_s7-200_smart:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-300_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_s7-300:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_s7-400_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_s7-400:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_advanced_modem_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_advanced_modem:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_basic_modem_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_basic_modem:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_teleservice_adapter_standard_modem_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_teleservice_adapter_standard_modem:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_winac_rtx_2010_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_winac_rtx_2010:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simocode_pro_v_profinet_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simocode_pro_v_profinet:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simotion_firmware:4.5:*:*:*:*:*:*:* (and previous)
     OR
          cpe:2.3:h:siemens:simotion:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics__s110_w._pn_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:_s110_w._pn:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_dcm_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinamics_dcm:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_dcp_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_g110m_firmware:4.7:*:*:*:*:*:*:* (and previous)
     OR
          cpe:2.3:h:siemens:sinamics_g110m:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_g120\(c\/p\/d\)_w._pn_firmware:4.7:*:*:*:*:*:*:* (and previous)
     OR
          cpe:2.3:h:siemens:sinamics_g120\(c\/p\/d\)_w._pn:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_g130_firmware:4.8:*:*:*:*:*:*:* (and previous)
     OR
          cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_g150_firmware:4.8:*:*:*:*:*:*:* (and previous)
     OR
          cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_s120_firmware:4.8:*:*:*:*:*:*:* (and previous)
     OR
          cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_s150_firmware:4.8:*:*:*:*:*:*:* (and previous)
     OR
          cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinamics_v90_w._pn_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sinamics_v90_w._pn:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinumerik_828d_firmware:4.5:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:o:siemens:sinumerik_828d_firmware:4.7:*:*:*:*:*:*:* (and previous)
     OR
          cpe:2.3:h:siemens:sinumerik_828d:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:4.5:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:4.7:*:*:*:*:*:*:* (and previous)
     OR
          cpe:2.3:h:siemens:sinumerik_840d_sl:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sirius_act_3su1_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sirius_act_3su1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sirius_motor_starter_m200d_profinet_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sirius_motor_starter_m200d_profinet:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sirius_soft_starter_3rw44_pn_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sirius_soft_starter_3rw44_pn:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:sitop_psu8600_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:sitop_psu8600:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:softnet_profinet_io_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:softnet_profinet_io:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:ups1600_profinet_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:ups1600_profinet:-:*:*:*:*:*:*:*

http://www.securityfocus.com/bid/98369 No Types Assigned

http://www.securityfocus.com/bid/98369 Third Party Advisory, VDB Entry

https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf No Types Assigned

https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf Mitigation, Patch, Vendor Advisory