-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security

Vulnerability Details

Registries

Custom Views

Weaknesses

Attack Patterns

Filters & Tools

SIPLUS TIM 1531 IRC

Source -

CNA

CNA CVEs -

15

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

0

Related CVEs Related Vendors Related Assigners Reports

15Vulnerabilities found

Assigner-Siemens

Assigner-Siemens

CVSS Score-8.2||HIGH

EPSS-0.16% / 37.09%

||

7 Day CHG~0.00%

Published-10 Sep, 2024 | 09:33

Updated-10 Sep, 2024 | 15:10

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-7 LTE (All versions < V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). The web server of the affected devices do not properly handle certain errors when using the Expect HTTP request header, resulting in NULL dereference. This could allow a remote attacker with no privileges to cause a denial of service condition in the system.

Action-Not Available

Vendor-Siemens AG

Product-SIMATIC CP 1243-7 LTE SIMATIC WinCC Runtime Advanced TIM 1531 IRC SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)SIMATIC HMI Comfort Panels (incl. SIPLUS variants)SIMATIC CP 1243-8 IRC SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)SIMATIC IPC DiagBase SIMATIC CP 1243-1 (incl. SIPLUS variants)SIMATIC IPC DiagMonitor SIPLUS TIM 1531 IRC

CWE ID-CWE-476

NULL Pointer Dereference

Assigner-Siemens

Assigner-Siemens

CVSS Score-5.9||MEDIUM

EPSS-0.18% / 40.41%

||

7 Day CHG~0.00%

Published-10 Sep, 2024 | 09:33

Updated-10 Sep, 2024 | 15:10

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-7 LTE (All versions < V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). The web server of the affected devices do not properly handle the shutdown or reboot request, which could lead to the clean up of certain resources. This could allow a remote attacker with elevated privileges to cause a denial of service condition in the system.

Action-Not Available

Vendor-Siemens AG

Product-SIMATIC CP 1243-7 LTE SIMATIC WinCC Runtime Advanced TIM 1531 IRC SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)SIMATIC HMI Comfort Panels (incl. SIPLUS variants)SIMATIC CP 1243-8 IRC SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)SIMATIC IPC DiagBase SIMATIC CP 1243-1 (incl. SIPLUS variants)SIMATIC IPC DiagMonitor SIPLUS TIM 1531 IRC

CWE ID-CWE-476

NULL Pointer Dereference

Assigner-Siemens

Assigner-Siemens

CVSS Score-8.2||HIGH

EPSS-0.18% / 39.86%

||

7 Day CHG~0.00%

Published-10 Sep, 2024 | 09:33

Updated-10 Sep, 2024 | 15:11

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-7 LTE (All versions < V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). The web server of the affected devices do not properly handle certain requests, causing a timeout in the watchdog, which could lead to the clean up of pointers. This could allow a remote attacker to cause a denial of service condition in the system.

Action-Not Available

Vendor-Siemens AG

Product-SIMATIC CP 1243-7 LTE SIMATIC WinCC Runtime Advanced TIM 1531 IRC SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)SIMATIC HMI Comfort Panels (incl. SIPLUS variants)SIMATIC CP 1243-8 IRC SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)SIMATIC IPC DiagBase SIMATIC CP 1243-1 (incl. SIPLUS variants)SIMATIC IPC DiagMonitor SIPLUS TIM 1531 IRC

CWE ID-CWE-476

NULL Pointer Dereference

Assigner-Siemens

Assigner-Siemens

CVSS Score-6.9||MEDIUM

EPSS-0.23% / 45.35%

||

7 Day CHG~0.00%

Published-11 Jun, 2024 | 14:19

Updated-03 Aug, 2024 | 12:14

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). Casting an internal value could lead to floating point exception under certain circumstances. This could allow an attacker to cause a denial of service condition on affected devices.

Action-Not Available

Vendor-Siemens AG

Product-siplus_tim_1531_irc siplus_tim_1531_irc_firmware TIM 1531 IRC SIPLUS TIM 1531 IRC tim_1531_irc siplus_tim_1531_irc

CWE ID-CWE-681

Incorrect Conversion between Numeric Types

Assigner-Siemens

Assigner-Siemens

CVSS Score-6.9||MEDIUM

EPSS-0.14% / 35.12%

||

7 Day CHG~0.00%

Published-11 Jun, 2024 | 11:15

Updated-02 Aug, 2024 | 22:16

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). The web server of affected products, if configured to allow the import of PKCS12 containers, could end up in an infinite loop when processing incomplete certificate chains. This could allow an authenticated remote attacker to create a denial of service condition by importing specially crafted PKCS12 containers.

Action-Not Available

Vendor-Siemens AG

Product-SIMATIC CP 1542SP-1 TIM 1531 IRC SIPLUS ET 200SP CP 1543SP-1 ISEC SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL SIMATIC CP 1542SP-1 IRC SIMATIC CP 1543SP-1 SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL SIPLUS TIM 1531 IRC

CWE ID-CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

Assigner-Siemens

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.32% / 54.05%

||

7 Day CHG~0.00%

Published-11 Apr, 2023 | 09:02

Updated-07 Feb, 2025 | 16:51

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions < V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions < V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions < V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions < V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions < V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions < V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions < V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.

Action-Not Available

Vendor-Siemens AG

Product-siplus_s7-1200_cp_1243-1_rail simatic_ipc_diagbase_firmware siplus_tim_1531_irc simatic_cp_1243-8_irc_firmware simatic_cp_1542sp-1_firmware siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware simatic_cp_1243-1_dnp3 simatic_cp_1243-1_iec_firmware simatic_cp_1243-1_firmware simatic_cp_1243-7_lte_eu_firmware siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware siplus_net_cp_443-1_advanced siplus_net_cp_1242-7_v2_firmware simatic_cp_1242-7_v2 siplus_net_cp_443-1_advanced_firmware tim_1531_irc tim_1531_irc_firmware simatic_cp_443-1 siplus_s7-1200_cp_1243-1_rail_firmware simatic_cp_1242-7_v2_firmware simatic_cp_1243-8_irc siplus_s7-1200_cp_1243-1_firmware simatic_ipc_diagmonitor siplus_net_cp_1242-7_v2 simatic_cp_1543sp-1 simatic_cp_443-1_advanced_firmware siplus_et_200sp_cp_1542sp-1_irc_tx_rail simatic_cp_443-1_firmware siplus_tim_1531_irc_firmware simatic_cp_1243-7_lte_eu siplus_s7-1200_cp_1243-1 simatic_cp_1542sp-1_irc simatic_cp_1243-1 siplus_et_200sp_cp_1543sp-1_isec simatic_cp_1243-1_dnp3_firmware simatic_cp_1542sp-1_irc_firmware simatic_cp_1543sp-1_firmware simatic_cp_1542sp-1 siplus_net_cp_443-1 siplus_et_200sp_cp_1543sp-1_isec_tx_rail siplus_et_200sp_cp_1543sp-1_isec_firmware simatic_cp_1243-1_iec simatic_ipc_diagmonitor_firmware siplus_net_cp_443-1_firmware simatic_cp_1243-7_lte_us_firmware simatic_ipc_diagbase simatic_cp_443-1_advanced simatic_cp_1243-7_lte_us SIMATIC CP 1243-7 LTE US SIPLUS NET CP 1242-7 V2 SIPLUS TIM 1531 IRC SIMATIC CP 443-1 Advanced SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL SIMATIC CP 1243-7 LTE EU SIMATIC CP 1542SP-1 IRC SIPLUS S7-1200 CP 1243-1 TIM 1531 IRC SIPLUS NET CP 443-1 SIMATIC CP 1242-7 V2 SIMATIC CP 1542SP-1 SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL SIMATIC CP 1243-8 IRC SIPLUS ET 200SP CP 1543SP-1 ISEC SIMATIC CP 1243-1 SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)SIMATIC CP 1543SP-1 SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)SIPLUS S7-1200 CP 1243-1 RAIL SIMATIC CP 443-1 SIPLUS NET CP 443-1 Advanced

CWE ID-CWE-770

Allocation of Resources Without Limits or Throttling

Assigner-Siemens

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.21% / 43.40%

||

7 Day CHG~0.00%

Published-11 Apr, 2023 | 09:02

Updated-10 Sep, 2024 | 10:15

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions < V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions < V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions < V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions < V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions < V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions < V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions < V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.

Action-Not Available

Vendor-Siemens AG

Product-siplus_s7-1200_cp_1243-1_rail simatic_ipc_diagbase_firmware siplus_tim_1531_irc simatic_cp_1243-8_irc_firmware simatic_cp_1542sp-1_firmware siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware simatic_cp_1243-1_dnp3 simatic_cp_1243-1_iec_firmware simatic_cp_1243-1_firmware simatic_cp_1243-7_lte_eu_firmware siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware siplus_net_cp_443-1_advanced siplus_net_cp_1242-7_v2_firmware simatic_cp_1242-7_v2 siplus_net_cp_443-1_advanced_firmware tim_1531_irc tim_1531_irc_firmware simatic_cp_443-1 siplus_s7-1200_cp_1243-1_rail_firmware simatic_cp_1242-7_v2_firmware simatic_cp_1243-8_irc siplus_s7-1200_cp_1243-1_firmware simatic_ipc_diagmonitor siplus_net_cp_1242-7_v2 simatic_cp_1543sp-1 simatic_cp_443-1_advanced_firmware siplus_et_200sp_cp_1542sp-1_irc_tx_rail simatic_cp_443-1_firmware siplus_tim_1531_irc_firmware simatic_cp_1243-7_lte_eu siplus_s7-1200_cp_1243-1 simatic_cp_1542sp-1_irc simatic_cp_1243-1 siplus_et_200sp_cp_1543sp-1_isec simatic_cp_1243-1_dnp3_firmware simatic_cp_1542sp-1_irc_firmware simatic_cp_1543sp-1_firmware simatic_cp_1542sp-1 siplus_net_cp_443-1 siplus_et_200sp_cp_1543sp-1_isec_tx_rail siplus_et_200sp_cp_1543sp-1_isec_firmware simatic_cp_1243-1_iec simatic_ipc_diagmonitor_firmware siplus_net_cp_443-1_firmware simatic_cp_1243-7_lte_us_firmware simatic_ipc_diagbase simatic_cp_443-1_advanced simatic_cp_1243-7_lte_us SIMATIC CP 1542SP-1 TIM 1531 IRC SIPLUS ET 200SP CP 1543SP-1 ISEC SIMATIC CP 1242-7 V2 SIPLUS S7-1200 CP 1243-1 SIMATIC CP 1243-8 IRC SIMATIC CP 1543SP-1 SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL SIPLUS TIM 1531 IRC SIPLUS S7-1200 CP 1243-1 RAIL SIMATIC CP 443-1 Advanced SIMATIC CP 1243-1 SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)SIPLUS NET CP 443-1 Advanced SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL SIMATIC CP 1542SP-1 IRC SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)SIPLUS NET CP 1242-7 V2 SIMATIC CP 443-1 SIMATIC CP 1243-7 LTE US SIMATIC CP 1243-7 LTE EU SIPLUS NET CP 443-1 siplus_s7-1200_cp_1243-1_rail simatic_cp_1543sp-1 siplus_tim_1531_irc siplus_et_200sp_cp_1542sp-1_irc_tx_rail simatic_cp_1243-1_dnp3 siplus_net_cp_443-1_advanced siplus_s7-1200_cp_1243-1 simatic_cp_1243-7_lte_eu simatic_cp_1542sp-1_irc simatic_cp_1243-1 siplus_et_200sp_cp_1543sp-1_isec simatic_cp_1242-7_v2 tim_1531_irc simatic_cp_1542sp-1 simatic_cp_443-1 siplus_net_cp_443-1 simatic_cp_1243-8_irc siplus_et_200sp_cp_1543sp-1_isec_tx_rail simatic_cp_1243-1_iec simatic_cp_443-1_advanced siplus_net_cp_1242-7_v2 simatic_cp_1243-7_lte_us

CWE ID-CWE-833

Deadlock

Assigner-Siemens

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.21% / 42.76%

||

7 Day CHG~0.00%

Published-11 Apr, 2023 | 09:02

Updated-10 Sep, 2024 | 10:15

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions < V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions < V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions < V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions < V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions < V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions < V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions < V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected product.

Action-Not Available

Vendor-Siemens AG

Product-siplus_s7-1200_cp_1243-1_rail simatic_ipc_diagbase_firmware siplus_tim_1531_irc simatic_cp_1243-8_irc_firmware simatic_cp_1542sp-1_firmware siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware simatic_cp_1243-1_dnp3 simatic_cp_1243-1_iec_firmware simatic_cp_1243-1_firmware simatic_cp_1243-7_lte_eu_firmware siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware siplus_net_cp_443-1_advanced siplus_net_cp_1242-7_v2_firmware simatic_cp_1242-7_v2 siplus_net_cp_443-1_advanced_firmware tim_1531_irc tim_1531_irc_firmware simatic_cp_443-1 siplus_s7-1200_cp_1243-1_rail_firmware simatic_cp_1242-7_v2_firmware simatic_cp_1243-8_irc siplus_s7-1200_cp_1243-1_firmware simatic_ipc_diagmonitor siplus_net_cp_1242-7_v2 simatic_cp_1543sp-1 simatic_cp_443-1_advanced_firmware siplus_et_200sp_cp_1542sp-1_irc_tx_rail simatic_cp_443-1_firmware siplus_tim_1531_irc_firmware simatic_cp_1243-7_lte_eu siplus_s7-1200_cp_1243-1 simatic_cp_1542sp-1_irc simatic_cp_1243-1 siplus_et_200sp_cp_1543sp-1_isec simatic_cp_1243-1_dnp3_firmware simatic_cp_1542sp-1_irc_firmware simatic_cp_1543sp-1_firmware simatic_cp_1542sp-1 siplus_net_cp_443-1 siplus_et_200sp_cp_1543sp-1_isec_tx_rail siplus_et_200sp_cp_1543sp-1_isec_firmware simatic_cp_1243-1_iec simatic_ipc_diagmonitor_firmware siplus_net_cp_443-1_firmware simatic_cp_1243-7_lte_us_firmware simatic_ipc_diagbase simatic_cp_443-1_advanced simatic_cp_1243-7_lte_us SIMATIC CP 1542SP-1 TIM 1531 IRC SIPLUS ET 200SP CP 1543SP-1 ISEC SIMATIC CP 1242-7 V2 SIPLUS S7-1200 CP 1243-1 SIMATIC CP 1243-8 IRC SIMATIC CP 1543SP-1 SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL SIPLUS TIM 1531 IRC SIPLUS S7-1200 CP 1243-1 RAIL SIMATIC CP 443-1 Advanced SIMATIC CP 1243-1 SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)SIPLUS NET CP 443-1 Advanced SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL SIMATIC CP 1542SP-1 IRC SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)SIPLUS NET CP 1242-7 V2 SIMATIC CP 443-1 SIMATIC CP 1243-7 LTE US SIMATIC CP 1243-7 LTE EU SIPLUS NET CP 443-1 siplus_s7-1200_cp_1243-1_rail simatic_cp_1543sp-1 siplus_tim_1531_irc siplus_et_200sp_cp_1542sp-1_irc_tx_rail simatic_cp_1243-1_dnp3 siplus_net_cp_443-1_advanced simatic_cp_1243-7_lte_eu siplus_s7-1200_cp_1243-1 simatic_cp_1542sp-1_irc simatic_cp_1243-1 siplus_et_200sp_cp_1543sp-1_isec simatic_cp_1542sp-1 simatic_cp_443-1 siplus_net_cp_443-1 siplus_et_200sp_cp_1543sp-1_isec_tx_rail simatic_cp_1243-1_iec simatic_cp_1242-7_gprs_v2 simatic_cp_443-1_advanced siplus_net_cp_1242-7_v2 simatic_cp_1243-7_lte_us simatic_cp_1243-8

CWE ID-CWE-416

Use After Free

Assigner-Siemens

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.09% / 27.08%

||

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 13:45

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

Action-Not Available

Vendor-Siemens AG

Product-simatic_s7-1500_cpu_1507s simatic_s7-1200_cpu_12_1214fc simatic_s7-1500_cpu_cpu_1513pro-2 simatic_s7-1500_cpu_1511c simatic_s7-1500_cpu_1511t-1_firmware simatic_s7-1500_cpu_1512sp-1 siplus_s7-300_cpu_314 siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware simatic_s7-1200_cpu_12_1214c_firmware simatic_s7-1200_cpu_12_1211c simatic_s7-1500_cpu_1508s_f_firmware simatic_s7-1500_cpu_1510sp-1 simatic_s7-1200_cpu_1212c simatic_s7-1500_cpu_1512spf-1 simatic_s7-1500_cpu_1513-1 simatic_s7-1200_cpu_1212fc_firmware simatic_s7-1500_cpu_1517-3_pn simatic_s7-1500_cpu_1515-2_pn_firmware simatic_s7-1500_cpu_1517f-3_pn\/dp simatic_s7-1500_cpu_1513r-1 simatic_s7-1200_cpu_1215_fc simatic_s7-1500_cpu_1512c_firmware simatic_s7-1500_cpu_1517f-3_pn\/dp_firmware simatic_s7-1200_cpu_12_1215c simatic_s7-1500_cpu_1511-1_firmware simatic_s7-1500_cpu_1511-1_pn simatic_s7-1500_cpu_1517f-3_firmware simatic_s7-1500_cpu_1518f-4_pn\/dp_firmware simatic_s7-1500_cpu_1518hf-4 simatic_s7-1500_cpu_1518-4_pn_firmware siplus_tim_1531_irc_firmware simatic_s7-1500_cpu_1518-4_dp_firmware simatic_s7-1500_cpu_1516tf-3_firmware simatic_s7-1500_cpu_1511f-1_pn_firmware simatic_s7-1500_cpu_1516-3_firmware simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware simatic_s7-1500_cpu_1517-3_pn\/dp simatic_s7-1500_cpu_1517-3 simatic_s7-1500_cpu_1518t-4_firmware simatic_s7-1500_cpu_1508s_f simatic_s7-1500_cpu_15prof-2_firmware simatic_s7-1500_cpu_1513f-1_pn simatic_s7-1200_cpu_1214c_firmware simatic_s7-1500_cpu_1517-3_pn_firmware simatic_s7-1500_cpu_1517-3_dp simatic_s7-1200_cpu_12_1214c simatic_s7-1200_cpu_1211c_firmware simatic_s7-1500_cpu_cpu_1513pro-2_firmware simatic_s7-1200_cpu_1214c siplus_tim_1531_irc simatic_s7-1500_cpu_15prof-2 simatic_s7-1500_cpu_1516tf-3 siplus_s7-300_cpu_315-2_pn\/dp_firmware simatic_s7-1500_cpu_1516f-3_pn\/dp_firmware simatic_s7-1500_cpu_151511f-1_firmware simatic_s7-1500_cpu_1507s_f_firmware simatic_s7-1500_cpu_1516t-3_firmware simatic_s7-1500_cpu_1511t-1 simatic_s7-1500_cpu_1517tf-3 simatic_s7-1500_cpu_1515-2_pn simatic_s7-1200_cpu_1214_fc simatic_s7-1500_cpu_1515-2_firmware simatic_s7-1500_cpu_1516pro-2_firmware tim_1531_irc_firmware simatic_s7-1500_cpu_1515-2 simatic_s7-1500_cpu_1516-3_pn simatic_s7-1500_cpu_1516pro_f_firmware simatic_s7-1500_cpu_1516-3 simatic_s7-1200_cpu_1214fc simatic_s7-1500_cpu_1518f-4_pn\/dp simatic_s7-1500_cpu_1508s_firmware simatic_s7-1500_cpu_1511f-1_firmware simatic_s7-1200_cpu_12_1212fc simatic_s7-1500_cpu_151511c-1 simatic_s7-1500_cpu_1518tf-4_firmware siplus_s7-1200_cp_1243-1 simatic_s7-1500_cpu_1511f-1_pn simatic_s7-1500_cpu_1507s_f siplus_s7-300_cpu_315-2_dp simatic_s7-1500_cpu_1518 simatic_s7-1500_cpu_1513-1_pn_firmware simatic_s7-1200_cpu_1215fc simatic_s7-1500_cpu_1518f-4 simatic_s7-1500_cpu_1516pro_f simatic_s7-1500_cpu_1513r-1_firmware simatic_et_200_sp_open_controller_cpu_1515sp_pc simatic_s7-1500_cpu_1512c-1_firmware simatic_s7-1500_cpu_1513f-1_pn_firmware siplus_et_200sp_cp_1543sp-1_isec_firmware simatic_s7-1500_cpu_1518_firmware simatic_s7-1500_cpu_1518-4_firmware simatic_s7-1500_cpu_1518tf-4 simatic_s7-1200_cpu_1214_fc_firmware siplus_s7-1200_cp_1243-1_rail simatic_s7-1500_cpu_1516t-3 simatic_s7-1500_cpu_1510sp_firmware simatic_s7-1500_cpu_1518-4_pn\/dp_mfp siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware simatic_s7-1200_cpu_1215_fc_firmware simatic_s7-1200_cpu_12_1215fc_firmware simatic_s7-1500_cpu_1515t-2 simatic_s7-1500_cpu_15pro-2 simatic_s7-1500_cpu_1518-4_pn simatic_s7-1200_cpu_12_1212c_firmware simatic_s7-1200_cpu_12_1212fc_firmware simatic_s7-1500_cpu_1511-1_pn_firmware simatic_s7-1500_cpu_15pro-2_firmware simatic_s7-1500_cpu_1515tf-2_firmware tim_1531_irc simatic_s7-1500_cpu_151511c-1_firmware simatic_s7-1200_cpu_12_1217c simatic_s7-1500_cpu_1518-4_pn\/dp_firmware simatic_s7-1500_cpu_1510sp simatic_s7-1200_cpu_12_1217c_firmware simatic_s7-1500_cpu_1518f-4_firmware simatic_s7-1200_cpu_1217c simatic_s7-1500_cpu_151511f-1 simatic_s7-1500_software_controller_firmware simatic_s7-1500_cpu_1511-1 simatic_s7-1500_cpu_1518-4_dp siplus_s7-300_cpu_317-2_pn\/dp_firmware simatic_s7-1200_cpu_1215c_firmware simatic_s7-1500_cpu_1513-1_pn simatic_s7-1200_cpu_1212c_firmware simatic_s7-1500_cpu_1515f-2_firmware simatic_s7-1200_cpu_1217c_firmware simatic_s7-1200_cpu_1214fc_firmware simatic_s7-1500_cpu_cpu_1513prof-2_firmware simatic_s7-1200_cpu_1215c simatic_s7-1500_cpu_1515r-2 simatic_s7-1200_cpu_12_1215fc siplus_et_200sp_cp_1543sp-1_isec simatic_s7-1500_cpu_1513f-1 simatic_s7-1500_cpu_1512c simatic_s7-1500_cpu_1516f-3_pn\/dp simatic_s7-1500_cpu_1511c-1 simatic_s7-1500_cpu_1517f-3 simatic_s7-1500_cpu_1512spf-1_firmware siplus_s7-300_cpu_314_firmware siplus_et_200sp_cp_1543sp-1_isec_tx_rail simatic_s7-1500_cpu_1517tf-3_firmware simatic_s7-1500_cpu_1516f-3_firmware simatic_s7-1500_cpu_1517-3_firmware simatic_s7-1200_cpu_12_1214fc_firmware simatic_s7-1500_software_controller simatic_s7-1500_cpu_1511c-1_firmware simatic_s7-1500_cpu_1517-3_dp_firmware simatic_s7-1500_cpu_1516-3_pn\/dp_firmware simatic_s7-1500_cpu_1518hf-4_firmware simatic_s7-1200_cpu_12_1212c siplus_s7-300_cpu_315-2_pn\/dp simatic_s7-1500_cpu_1511f-1 siplus_s7-300_cpu_317-2_pn\/dp simatic_s7-1500_cpu_1515tf-2 siplus_s7-1200_cp_1243-1_rail_firmware simatic_s7-1500_cpu_1511c_firmware simatic_s7-1500_cpu_1511tf-1 simatic_s7-1500_cpu_1518-4 simatic_s7-1500_cpu_1518-4_pn\/dp siplus_s7-1200_cp_1243-1_firmware simatic_s7-1500_cpu_1511tf-1_firmware simatic_s7-1500_cpu_1517-3_pn\/dp_firmware simatic_s7-1500_cpu_1516-3_dp simatic_s7-1500_cpu_1508s siplus_s7-300_cpu_315-2_dp_firmware simatic_s7-plcsim_advanced_firmware simatic_s7-1500_cpu_1510sp-1_firmware simatic_s7-1500_cpu_1516-3_pn\/dp simatic_s7-1500_cpu_1515f-2_pn_firmware simatic_s7-1500_cpu_1515t-2_firmware siplus_et_200sp_cp_1542sp-1_irc_tx_rail simatic_s7-1500_cpu_1516-3_dp_firmware simatic_s7-1200_cpu_12_1215c_firmware simatic_s7-1500_cpu_1512sp-1_firmware simatic_s7-1200_cpu_1215fc_firmware simatic_s7-1500_cpu_1512c-1 simatic_s7-1500_cpu_1515f-2 simatic_s7-1500_cpu_cpu_1513prof-2 simatic_s7-1500_cpu_1515f-2_pn simatic_s7-1200_cpu_1211c simatic_s7-1500_cpu_1516f-3 simatic_s7-1500_cpu_1516-3_pn_firmware simatic_s7-1200_cpu_12_1211c_firmware simatic_s7-plcsim_advanced simatic_s7-1500_cpu_1513f-1_firmware simatic_s7-1200_cpu_1212fc simatic_s7-1500_cpu_1516pro-2 simatic_s7-1500_cpu_1515r-2_firmware simatic_s7-1500_cpu_1507s_firmware simatic_s7-1500_cpu_1513-1_firmware simatic_s7-1500_cpu_1518t-4 SIMATIC S7-1500 CPU 1512C-1 PN SIMATIC S7-1500 CPU 1517F-3 PN/DP SIMATIC S7-1500 CPU 1515-2 PN SIMATIC S7-1500 CPU 1511T-1 PN SIPLUS S7-1500 CPU 1518-4 PN/DP SIPLUS S7-1500 CPU 1518F-4 PN/DP SIPLUS S7-1500 CPU 1518-4 PN/DP MFP SIMATIC S7-1500 CPU 1515TF-2 PN SIMATIC S7-1500 CPU 1510SP-1 PN SIMATIC S7-1500 CPU 1516-3 PN/DP SIMATIC S7-1500 CPU 1511TF-1 PN SIPLUS S7-1500 CPU 1515F-2 PN SIPLUS S7-1500 CPU 1517H-3 PN SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL SIMATIC S7-1500 CPU 1518HF-4 PN SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN SIPLUS ET 200SP CPU 1512SP-1 PN RAIL SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN SIPLUS ET 200SP CPU 1510SP-1 PN RAIL SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN SIMATIC S7-PLCSIM Advanced SIMATIC S7-1500 CPU 1517-3 PN/DP SIMATIC S7-1500 CPU 1517H-3 PN SIMATIC S7-1500 CPU 1516TF-3 PN/DP SIMATIC S7-1500 CPU 1515T-2 PN SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL SIMATIC S7-1500 CPU 1511C-1 PN SIMATIC S7-1500 CPU 1517TF-3 PN/DP SIMATIC S7-1200 CPU family (incl. SIPLUS variants)SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL SIPLUS S7-1500 CPU 1511-1 PN TX RAIL SIPLUS S7-1500 CPU 1513F-1 PN SIMATIC Drive Controller CPU 1507D TF SIMATIC Drive Controller CPU 1504D TF SIMATIC S7-1500 CPU 1513R-1 PN SIPLUS S7-1500 CPU 1516-3 PN/DP SIMATIC S7-1500 CPU 1515R-2 PN SIMATIC S7-1500 CPU 1512SP F-1 PN TIM 1531 IRC SIPLUS S7-1500 CPU 1511F-1 PN SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL SIMATIC S7-1500 Software Controller V2 SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)SIPLUS ET 200SP CPU 1512SP F-1 PN SIMATIC S7-1500 CPU 1515F-2 PN SIMATIC S7-1500 CPU 1518-4 PN/DP SIMATIC S7-1500 CPU 1513-1 PN SIPLUS ET 200SP CPU 1510SP F-1 PN SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK SIMATIC S7-1500 CPU 1518F-4 PN/DP SIMATIC S7-1500 CPU 1518-4 PN/DP MFP SIPLUS ET 200SP CPU 1510SP-1 PN SIPLUS S7-1500 CPU 1516F-3 PN/DP SIMATIC S7-1500 CPU 1516T-3 PN/DP SIMATIC S7-1500 CPU 1518TF-4 PN/DP SIPLUS S7-1500 CPU 1515R-2 PN TX RAIL SIMATIC S7-1500 CPU 1512SP-1 PN SIMATIC S7-1500 CPU 1518T-4 PN/DP SIMATIC S7-1500 CPU 1511-1 PN SIMATIC S7-1500 CPU 1517T-3 PN/DP SIPLUS S7-1500 CPU 1518HF-4 PN SIPLUS S7-1500 CPU 1513-1 PN SIPLUS S7-1500 CPU 1515R-2 PN SIMATIC S7-1500 CPU 1513F-1 PN SIMATIC S7-1500 CPU 1510SP F-1 PN SIPLUS S7-1500 CPU 1515F-2 PN RAIL SIPLUS TIM 1531 IRC SIMATIC S7-1500 CPU 1511F-1 PN SIMATIC S7-1500 CPU 1516F-3 PN/DP SIPLUS ET 200SP CPU 1512SP-1 PN SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL SIPLUS S7-1500 CPU 1511-1 PN SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL

CWE ID-CWE-20

Improper Input Validation

Assigner-Siemens

Assigner-Siemens

CVSS Score-5.5||MEDIUM

EPSS-0.07% / 22.29%

||

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 13:45

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

Action-Not Available

Vendor-Siemens AG

Product-simatic_s7-1500_cpu_1507s simatic_s7-1200_cpu_12_1214fc simatic_s7-1500_cpu_cpu_1513pro-2 simatic_s7-1500_cpu_1511c simatic_s7-1500_cpu_1511t-1_firmware simatic_s7-1500_cpu_1512sp-1 siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware simatic_s7-1200_cpu_12_1214c_firmware simatic_s7-1200_cpu_12_1211c simatic_s7-1500_cpu_1508s_f_firmware simatic_s7-1500_cpu_1510sp-1 simatic_s7-1200_cpu_1212c simatic_s7-1500_cpu_1512spf-1 simatic_s7-1500_cpu_1513-1 simatic_s7-1200_cpu_1212fc_firmware simatic_s7-1500_cpu_1517-3_pn simatic_s7-1500_cpu_1515-2_pn_firmware simatic_s7-1500_cpu_1517f-3_pn\/dp simatic_s7-1500_cpu_1513r-1 simatic_s7-1200_cpu_1215_fc simatic_s7-1500_cpu_1512c_firmware simatic_s7-1500_cpu_1517f-3_pn\/dp_firmware simatic_s7-1200_cpu_12_1215c simatic_s7-1500_cpu_1511-1_firmware simatic_s7-1500_cpu_1511-1_pn simatic_s7-1500_cpu_1517f-3_firmware simatic_s7-1500_cpu_1518f-4_pn\/dp_firmware simatic_s7-1500_cpu_1518hf-4 simatic_s7-1500_cpu_1518-4_pn_firmware siplus_tim_1531_irc_firmware simatic_s7-1500_cpu_1518-4_dp_firmware simatic_s7-1500_cpu_1516tf-3_firmware simatic_s7-1500_cpu_1511f-1_pn_firmware simatic_s7-1500_cpu_1516-3_firmware simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware simatic_s7-1500_cpu_1517-3_pn\/dp simatic_s7-1500_cpu_1517-3 simatic_s7-1500_cpu_1518t-4_firmware simatic_s7-1500_cpu_1508s_f simatic_s7-1500_cpu_15prof-2_firmware simatic_s7-1500_cpu_1513f-1_pn simatic_s7-1200_cpu_1214c_firmware simatic_s7-1500_cpu_1517-3_pn_firmware simatic_s7-1500_cpu_1517-3_dp simatic_s7-1200_cpu_12_1214c simatic_s7-1200_cpu_1211c_firmware simatic_s7-1500_cpu_cpu_1513pro-2_firmware simatic_s7-1200_cpu_1214c siplus_tim_1531_irc simatic_s7-1500_cpu_15prof-2 simatic_s7-1500_cpu_1516tf-3 simatic_s7-1500_cpu_1516f-3_pn\/dp_firmware simatic_s7-1500_cpu_151511f-1_firmware simatic_s7-1500_cpu_1507s_f_firmware simatic_s7-1500_cpu_1516t-3_firmware simatic_s7-1500_cpu_1511t-1 simatic_s7-1500_cpu_1517tf-3 simatic_s7-1500_cpu_1515-2_pn simatic_s7-1200_cpu_1214_fc simatic_s7-1500_cpu_1515-2_firmware simatic_s7-1500_cpu_1516pro-2_firmware tim_1531_irc_firmware simatic_s7-1500_cpu_1515-2 simatic_s7-1500_cpu_1516-3_pn simatic_s7-1500_cpu_1516pro_f_firmware simatic_s7-1500_cpu_1516-3 simatic_s7-1200_cpu_1214fc simatic_s7-1500_cpu_1518f-4_pn\/dp simatic_s7-1500_cpu_1508s_firmware simatic_s7-1500_cpu_1511f-1_firmware simatic_s7-1200_cpu_12_1212fc simatic_s7-1500_cpu_151511c-1 simatic_s7-1500_cpu_1518tf-4_firmware siplus_s7-1200_cp_1243-1 simatic_s7-1500_cpu_1511f-1_pn simatic_s7-1500_cpu_1507s_f simatic_s7-1500_cpu_1518 simatic_s7-1500_cpu_1513-1_pn_firmware simatic_s7-1200_cpu_1215fc simatic_s7-1500_cpu_1518f-4 simatic_s7-1500_cpu_1516pro_f simatic_s7-1500_cpu_1513r-1_firmware simatic_et_200_sp_open_controller_cpu_1515sp_pc simatic_s7-1500_cpu_1512c-1_firmware simatic_s7-1500_cpu_1513f-1_pn_firmware siplus_et_200sp_cp_1543sp-1_isec_firmware simatic_s7-1500_cpu_1518_firmware simatic_s7-1500_cpu_1518-4_firmware simatic_s7-1500_cpu_1518tf-4 simatic_s7-1200_cpu_1214_fc_firmware siplus_s7-1200_cp_1243-1_rail simatic_s7-1500_cpu_1516t-3 simatic_s7-1500_cpu_1510sp_firmware simatic_s7-1500_cpu_1518-4_pn\/dp_mfp siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware simatic_s7-1200_cpu_1215_fc_firmware simatic_s7-1200_cpu_12_1215fc_firmware simatic_s7-1500_cpu_1515t-2 simatic_s7-1500_cpu_15pro-2 simatic_s7-1500_cpu_1518-4_pn simatic_s7-1200_cpu_12_1212c_firmware simatic_s7-1200_cpu_12_1212fc_firmware simatic_s7-1500_cpu_1511-1_pn_firmware simatic_s7-1500_cpu_15pro-2_firmware simatic_s7-1500_cpu_1515tf-2_firmware tim_1531_irc simatic_s7-1500_cpu_151511c-1_firmware simatic_s7-1200_cpu_12_1217c simatic_s7-1500_cpu_1518-4_pn\/dp_firmware simatic_s7-1500_cpu_1510sp simatic_s7-1200_cpu_12_1217c_firmware simatic_s7-1500_cpu_1518f-4_firmware simatic_s7-1200_cpu_1217c simatic_s7-1500_cpu_151511f-1 simatic_s7-1500_software_controller_firmware simatic_s7-1500_cpu_1511-1 simatic_s7-1500_cpu_1518-4_dp simatic_s7-1200_cpu_1215c_firmware simatic_s7-1500_cpu_1513-1_pn simatic_s7-1200_cpu_1212c_firmware simatic_s7-1500_cpu_1515f-2_firmware simatic_s7-1200_cpu_1217c_firmware simatic_s7-1200_cpu_1214fc_firmware simatic_s7-1500_cpu_cpu_1513prof-2_firmware simatic_s7-1200_cpu_1215c simatic_s7-1500_cpu_1515r-2 simatic_s7-1200_cpu_12_1215fc siplus_et_200sp_cp_1543sp-1_isec simatic_s7-1500_cpu_1513f-1 simatic_s7-1500_cpu_1512c simatic_s7-1500_cpu_1516f-3_pn\/dp simatic_s7-1500_cpu_1511c-1 simatic_s7-1500_cpu_1517f-3 simatic_s7-1500_cpu_1512spf-1_firmware siplus_et_200sp_cp_1543sp-1_isec_tx_rail simatic_s7-1500_cpu_1517tf-3_firmware simatic_s7-1500_cpu_1516f-3_firmware simatic_s7-1500_cpu_1517-3_firmware simatic_s7-1200_cpu_12_1214fc_firmware simatic_s7-1500_software_controller simatic_s7-1500_cpu_1511c-1_firmware simatic_s7-1500_cpu_1517-3_dp_firmware simatic_s7-1500_cpu_1516-3_pn\/dp_firmware simatic_s7-1500_cpu_1518hf-4_firmware simatic_s7-1200_cpu_12_1212c simatic_s7-1500_cpu_1511f-1 simatic_s7-1500_cpu_1515tf-2 siplus_s7-1200_cp_1243-1_rail_firmware simatic_s7-1500_cpu_1511c_firmware simatic_s7-1500_cpu_1511tf-1 simatic_s7-1500_cpu_1518-4 simatic_s7-1500_cpu_1518-4_pn\/dp siplus_s7-1200_cp_1243-1_firmware simatic_s7-1500_cpu_1511tf-1_firmware simatic_s7-1500_cpu_1517-3_pn\/dp_firmware simatic_s7-1500_cpu_1516-3_dp simatic_s7-1500_cpu_1508s simatic_s7-plcsim_advanced_firmware simatic_s7-1500_cpu_1510sp-1_firmware simatic_s7-1500_cpu_1516-3_pn\/dp simatic_s7-1500_cpu_1515f-2_pn_firmware simatic_s7-1500_cpu_1515t-2_firmware siplus_et_200sp_cp_1542sp-1_irc_tx_rail simatic_s7-1500_cpu_1516-3_dp_firmware simatic_s7-1200_cpu_12_1215c_firmware simatic_s7-1500_cpu_1512sp-1_firmware simatic_s7-1200_cpu_1215fc_firmware simatic_s7-1500_cpu_1512c-1 simatic_s7-1500_cpu_1515f-2 simatic_s7-1500_cpu_cpu_1513prof-2 simatic_s7-1500_cpu_1515f-2_pn simatic_s7-1200_cpu_1211c simatic_s7-1500_cpu_1516f-3 simatic_s7-1500_cpu_1516-3_pn_firmware simatic_s7-1200_cpu_12_1211c_firmware simatic_s7-plcsim_advanced simatic_s7-1500_cpu_1513f-1_firmware simatic_s7-1200_cpu_1212fc simatic_s7-1500_cpu_1516pro-2 simatic_s7-1500_cpu_1515r-2_firmware simatic_s7-1500_cpu_1507s_firmware simatic_s7-1500_cpu_1513-1_firmware simatic_s7-1500_cpu_1518t-4 SIMATIC S7-1500 CPU 1512C-1 PN SIMATIC S7-1500 CPU 1517F-3 PN/DP SIMATIC S7-1500 CPU 1515-2 PN SIMATIC S7-1500 CPU 1511T-1 PN SIPLUS S7-1500 CPU 1518-4 PN/DP SIPLUS S7-1500 CPU 1518F-4 PN/DP SIPLUS S7-1500 CPU 1518-4 PN/DP MFP SIMATIC S7-1500 CPU 1515TF-2 PN SIMATIC S7-1500 CPU 1510SP-1 PN SIMATIC S7-1500 CPU 1516-3 PN/DP SIMATIC S7-1500 CPU 1511TF-1 PN SIPLUS S7-1500 CPU 1515F-2 PN SIPLUS S7-1500 CPU 1517H-3 PN SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL SIMATIC S7-1500 CPU 1518HF-4 PN SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN SIPLUS ET 200SP CPU 1512SP-1 PN RAIL SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN SIPLUS ET 200SP CPU 1510SP-1 PN RAIL SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN SIMATIC S7-PLCSIM Advanced SIMATIC S7-1500 CPU 1517-3 PN/DP SIMATIC S7-1500 CPU 1517H-3 PN SIMATIC S7-1500 CPU 1516TF-3 PN/DP SIMATIC S7-1500 CPU 1515T-2 PN SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL SIMATIC S7-1500 CPU 1511C-1 PN SIMATIC S7-1500 CPU 1517TF-3 PN/DP SIMATIC S7-1200 CPU family (incl. SIPLUS variants)SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL SIPLUS S7-1500 CPU 1511-1 PN TX RAIL SIPLUS S7-1500 CPU 1513F-1 PN SIMATIC Drive Controller CPU 1507D TF SIMATIC Drive Controller CPU 1504D TF SIMATIC S7-1500 CPU 1513R-1 PN SIPLUS S7-1500 CPU 1516-3 PN/DP SIMATIC S7-1500 CPU 1515R-2 PN SIMATIC S7-1500 CPU 1512SP F-1 PN TIM 1531 IRC SIPLUS S7-1500 CPU 1511F-1 PN SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL SIMATIC S7-1500 Software Controller V2 SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)SIPLUS ET 200SP CPU 1512SP F-1 PN SIMATIC S7-1500 CPU 1515F-2 PN SIMATIC S7-1500 CPU 1518-4 PN/DP SIMATIC S7-1500 CPU 1513-1 PN SIPLUS ET 200SP CPU 1510SP F-1 PN SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK SIMATIC S7-1500 CPU 1518F-4 PN/DP SIMATIC S7-1500 CPU 1518-4 PN/DP MFP SIPLUS ET 200SP CPU 1510SP-1 PN SIPLUS S7-1500 CPU 1516F-3 PN/DP SIMATIC S7-1500 CPU 1516T-3 PN/DP SIMATIC S7-1500 CPU 1518TF-4 PN/DP SIPLUS S7-1500 CPU 1515R-2 PN TX RAIL SIMATIC S7-1500 CPU 1512SP-1 PN SIMATIC S7-1500 CPU 1518T-4 PN/DP SIMATIC S7-1500 CPU 1511-1 PN SIMATIC S7-1500 CPU 1517T-3 PN/DP SIPLUS S7-1500 CPU 1518HF-4 PN SIPLUS S7-1500 CPU 1513-1 PN SIPLUS S7-1500 CPU 1515R-2 PN SIMATIC S7-1500 CPU 1513F-1 PN SIMATIC S7-1500 CPU 1510SP F-1 PN SIPLUS S7-1500 CPU 1515F-2 PN RAIL SIPLUS TIM 1531 IRC SIMATIC S7-1500 CPU 1511F-1 PN SIMATIC S7-1500 CPU 1516F-3 PN/DP SIPLUS ET 200SP CPU 1512SP-1 PN SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL SIPLUS S7-1500 CPU 1511-1 PN SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL

CWE ID-CWE-1287

Improper Validation of Specified Type of Input

CWE ID-CWE-20

Improper Input Validation

Assigner-Siemens

Assigner-Siemens

CVSS Score-4.9||MEDIUM

EPSS-0.06% / 19.78%

||

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 13:45

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

Action-Not Available

Vendor-Siemens AG

Product-simatic_s7-1500_cpu_1507s simatic_s7-1200_cpu_12_1214fc simatic_s7-1500_cpu_cpu_1513pro-2 simatic_s7-1500_cpu_1511c simatic_s7-1500_cpu_1511t-1_firmware simatic_s7-1500_cpu_1512sp-1 siplus_s7-300_cpu_314 siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware simatic_s7-1200_cpu_12_1214c_firmware simatic_s7-1200_cpu_12_1211c simatic_s7-1500_cpu_1508s_f_firmware simatic_s7-1500_cpu_1510sp-1 simatic_s7-1200_cpu_1212c simatic_s7-1500_cpu_1512spf-1 simatic_s7-1500_cpu_1513-1 simatic_s7-1200_cpu_1212fc_firmware simatic_s7-1500_cpu_1517-3_pn simatic_s7-1500_cpu_1515-2_pn_firmware simatic_s7-1500_cpu_1517f-3_pn\/dp simatic_s7-1500_cpu_1513r-1 simatic_s7-1200_cpu_1215_fc simatic_s7-1500_cpu_1512c_firmware simatic_s7-1500_cpu_1517f-3_pn\/dp_firmware simatic_s7-1200_cpu_12_1215c simatic_s7-1500_cpu_1511-1_firmware simatic_s7-1500_cpu_1511-1_pn simatic_s7-1500_cpu_1517f-3_firmware simatic_s7-1500_cpu_1518f-4_pn\/dp_firmware simatic_s7-1500_cpu_1518hf-4 simatic_s7-1500_cpu_1518-4_pn_firmware siplus_tim_1531_irc_firmware simatic_s7-1500_cpu_1518-4_dp_firmware simatic_s7-1500_cpu_1516tf-3_firmware simatic_s7-1500_cpu_1511f-1_pn_firmware simatic_s7-1500_cpu_1516-3_firmware simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware simatic_s7-1500_cpu_1517-3_pn\/dp simatic_s7-1500_cpu_1517-3 simatic_s7-1500_cpu_1518t-4_firmware simatic_s7-1500_cpu_1508s_f simatic_s7-1500_cpu_15prof-2_firmware simatic_s7-1500_cpu_1513f-1_pn simatic_s7-1200_cpu_1214c_firmware simatic_s7-1500_cpu_1517-3_pn_firmware simatic_s7-1500_cpu_1517-3_dp simatic_s7-1200_cpu_12_1214c simatic_s7-1200_cpu_1211c_firmware simatic_s7-1500_cpu_cpu_1513pro-2_firmware simatic_s7-1200_cpu_1214c siplus_tim_1531_irc simatic_s7-1500_cpu_15prof-2 simatic_s7-1500_cpu_1516tf-3 siplus_s7-300_cpu_315-2_pn\/dp_firmware simatic_s7-1500_cpu_1516f-3_pn\/dp_firmware simatic_s7-1500_cpu_151511f-1_firmware simatic_s7-1500_cpu_1507s_f_firmware simatic_s7-1500_cpu_1516t-3_firmware simatic_s7-1500_cpu_1511t-1 simatic_s7-1500_cpu_1517tf-3 simatic_s7-1500_cpu_1515-2_pn simatic_s7-1200_cpu_1214_fc simatic_s7-1500_cpu_1515-2_firmware simatic_s7-1500_cpu_1516pro-2_firmware tim_1531_irc_firmware simatic_s7-1500_cpu_1515-2 simatic_s7-1500_cpu_1516-3_pn simatic_s7-1500_cpu_1516pro_f_firmware simatic_s7-1500_cpu_1516-3 simatic_s7-1200_cpu_1214fc simatic_s7-1500_cpu_1518f-4_pn\/dp simatic_s7-1500_cpu_1508s_firmware simatic_s7-1500_cpu_1511f-1_firmware simatic_s7-1200_cpu_12_1212fc simatic_s7-1500_cpu_151511c-1 simatic_s7-1500_cpu_1518tf-4_firmware siplus_s7-1200_cp_1243-1 simatic_s7-1500_cpu_1511f-1_pn simatic_s7-1500_cpu_1507s_f siplus_s7-300_cpu_315-2_dp simatic_s7-1500_cpu_1518 simatic_s7-1500_cpu_1513-1_pn_firmware simatic_s7-1200_cpu_1215fc simatic_s7-1500_cpu_1518f-4 simatic_s7-1500_cpu_1516pro_f simatic_s7-1500_cpu_1513r-1_firmware simatic_et_200_sp_open_controller_cpu_1515sp_pc simatic_s7-1500_cpu_1512c-1_firmware simatic_s7-1500_cpu_1513f-1_pn_firmware siplus_et_200sp_cp_1543sp-1_isec_firmware simatic_s7-1500_cpu_1518_firmware simatic_s7-1500_cpu_1518-4_firmware simatic_s7-1500_cpu_1518tf-4 simatic_s7-1200_cpu_1214_fc_firmware siplus_s7-1200_cp_1243-1_rail simatic_s7-1500_cpu_1516t-3 simatic_s7-1500_cpu_1510sp_firmware simatic_s7-1500_cpu_1518-4_pn\/dp_mfp siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware simatic_s7-1200_cpu_1215_fc_firmware simatic_s7-1200_cpu_12_1215fc_firmware simatic_s7-1500_cpu_1515t-2 simatic_s7-1500_cpu_15pro-2 simatic_s7-1500_cpu_1518-4_pn simatic_s7-1200_cpu_12_1212c_firmware simatic_s7-1200_cpu_12_1212fc_firmware simatic_s7-1500_cpu_1511-1_pn_firmware simatic_s7-1500_cpu_15pro-2_firmware simatic_s7-1500_cpu_1515tf-2_firmware tim_1531_irc simatic_s7-1500_cpu_151511c-1_firmware simatic_s7-1200_cpu_12_1217c simatic_s7-1500_cpu_1518-4_pn\/dp_firmware simatic_s7-1500_cpu_1510sp simatic_s7-1200_cpu_12_1217c_firmware simatic_s7-1500_cpu_1518f-4_firmware simatic_s7-1200_cpu_1217c simatic_s7-1500_cpu_151511f-1 simatic_s7-1500_software_controller_firmware simatic_s7-1500_cpu_1511-1 simatic_s7-1500_cpu_1518-4_dp siplus_s7-300_cpu_317-2_pn\/dp_firmware simatic_s7-1200_cpu_1215c_firmware simatic_s7-1500_cpu_1513-1_pn simatic_s7-1200_cpu_1212c_firmware simatic_s7-1500_cpu_1515f-2_firmware simatic_s7-1200_cpu_1217c_firmware simatic_s7-1200_cpu_1214fc_firmware simatic_s7-1500_cpu_cpu_1513prof-2_firmware simatic_s7-1200_cpu_1215c simatic_s7-1500_cpu_1515r-2 simatic_s7-1200_cpu_12_1215fc siplus_et_200sp_cp_1543sp-1_isec simatic_s7-1500_cpu_1513f-1 simatic_s7-1500_cpu_1512c simatic_s7-1500_cpu_1516f-3_pn\/dp simatic_s7-1500_cpu_1511c-1 simatic_s7-1500_cpu_1517f-3 simatic_s7-1500_cpu_1512spf-1_firmware siplus_s7-300_cpu_314_firmware siplus_et_200sp_cp_1543sp-1_isec_tx_rail simatic_s7-1500_cpu_1517tf-3_firmware simatic_s7-1500_cpu_1516f-3_firmware simatic_s7-1500_cpu_1517-3_firmware simatic_s7-1200_cpu_12_1214fc_firmware simatic_s7-1500_software_controller simatic_s7-1500_cpu_1511c-1_firmware simatic_s7-1500_cpu_1517-3_dp_firmware simatic_s7-1500_cpu_1516-3_pn\/dp_firmware simatic_s7-1500_cpu_1518hf-4_firmware simatic_s7-1200_cpu_12_1212c siplus_s7-300_cpu_315-2_pn\/dp simatic_s7-1500_cpu_1511f-1 siplus_s7-300_cpu_317-2_pn\/dp simatic_s7-1500_cpu_1515tf-2 siplus_s7-1200_cp_1243-1_rail_firmware simatic_s7-1500_cpu_1511c_firmware simatic_s7-1500_cpu_1511tf-1 simatic_s7-1500_cpu_1518-4 simatic_s7-1500_cpu_1518-4_pn\/dp siplus_s7-1200_cp_1243-1_firmware simatic_s7-1500_cpu_1511tf-1_firmware simatic_s7-1500_cpu_1517-3_pn\/dp_firmware simatic_s7-1500_cpu_1516-3_dp simatic_s7-1500_cpu_1508s siplus_s7-300_cpu_315-2_dp_firmware simatic_s7-plcsim_advanced_firmware simatic_s7-1500_cpu_1510sp-1_firmware simatic_s7-1500_cpu_1516-3_pn\/dp simatic_s7-1500_cpu_1515f-2_pn_firmware simatic_s7-1500_cpu_1515t-2_firmware siplus_et_200sp_cp_1542sp-1_irc_tx_rail simatic_s7-1500_cpu_1516-3_dp_firmware simatic_s7-1200_cpu_12_1215c_firmware simatic_s7-1500_cpu_1512sp-1_firmware simatic_s7-1200_cpu_1215fc_firmware simatic_s7-1500_cpu_1512c-1 simatic_s7-1500_cpu_1515f-2 simatic_s7-1500_cpu_cpu_1513prof-2 simatic_s7-1500_cpu_1515f-2_pn simatic_s7-1200_cpu_1211c simatic_s7-1500_cpu_1516f-3 simatic_s7-1500_cpu_1516-3_pn_firmware simatic_s7-1200_cpu_12_1211c_firmware simatic_s7-plcsim_advanced simatic_s7-1500_cpu_1513f-1_firmware simatic_s7-1200_cpu_1212fc simatic_s7-1500_cpu_1516pro-2 simatic_s7-1500_cpu_1515r-2_firmware simatic_s7-1500_cpu_1507s_firmware simatic_s7-1500_cpu_1513-1_firmware simatic_s7-1500_cpu_1518t-4 SIMATIC S7-1500 CPU 1512C-1 PN SIMATIC S7-1500 CPU 1517F-3 PN/DP SIMATIC S7-1500 CPU 1515-2 PN SIMATIC S7-1500 CPU 1511T-1 PN SIPLUS S7-1500 CPU 1518-4 PN/DP SIPLUS S7-1500 CPU 1518F-4 PN/DP SIPLUS S7-1500 CPU 1518-4 PN/DP MFP SIMATIC S7-1500 CPU 1515TF-2 PN SIMATIC S7-1500 CPU 1510SP-1 PN SIMATIC S7-1500 CPU 1516-3 PN/DP SIMATIC S7-1500 CPU 1511TF-1 PN SIPLUS S7-1500 CPU 1515F-2 PN SIPLUS S7-1500 CPU 1517H-3 PN SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL SIMATIC S7-1500 CPU 1518HF-4 PN SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN SIPLUS ET 200SP CPU 1512SP-1 PN RAIL SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN SIPLUS ET 200SP CPU 1510SP-1 PN RAIL SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN SIMATIC S7-PLCSIM Advanced SIMATIC S7-1500 CPU 1517-3 PN/DP SIMATIC S7-1500 CPU 1517H-3 PN SIMATIC S7-1500 CPU 1516TF-3 PN/DP SIMATIC S7-1500 CPU 1515T-2 PN SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL SIMATIC S7-1500 CPU 1511C-1 PN SIMATIC S7-1500 CPU 1517TF-3 PN/DP SIMATIC S7-1200 CPU family (incl. SIPLUS variants)SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL SIPLUS S7-1500 CPU 1511-1 PN TX RAIL SIPLUS S7-1500 CPU 1513F-1 PN SIMATIC Drive Controller CPU 1507D TF SIMATIC Drive Controller CPU 1504D TF SIMATIC S7-1500 CPU 1513R-1 PN SIPLUS S7-1500 CPU 1516-3 PN/DP SIMATIC S7-1500 CPU 1515R-2 PN SIMATIC S7-1500 CPU 1512SP F-1 PN TIM 1531 IRC SIPLUS S7-1500 CPU 1511F-1 PN SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL SIMATIC S7-1500 Software Controller V2 SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)SIPLUS ET 200SP CPU 1512SP F-1 PN SIMATIC S7-1500 CPU 1515F-2 PN SIMATIC S7-1500 CPU 1518-4 PN/DP SIMATIC S7-1500 CPU 1513-1 PN SIPLUS ET 200SP CPU 1510SP F-1 PN SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK SIMATIC S7-1500 CPU 1518F-4 PN/DP SIMATIC S7-1500 CPU 1518-4 PN/DP MFP SIPLUS ET 200SP CPU 1510SP-1 PN SIPLUS S7-1500 CPU 1516F-3 PN/DP SIMATIC S7-1500 CPU 1516T-3 PN/DP SIMATIC S7-1500 CPU 1518TF-4 PN/DP SIPLUS S7-1500 CPU 1515R-2 PN TX RAIL SIMATIC S7-1500 CPU 1512SP-1 PN SIMATIC S7-1500 CPU 1518T-4 PN/DP SIMATIC S7-1500 CPU 1511-1 PN SIMATIC S7-1500 CPU 1517T-3 PN/DP SIPLUS S7-1500 CPU 1518HF-4 PN SIPLUS S7-1500 CPU 1513-1 PN SIPLUS S7-1500 CPU 1515R-2 PN SIMATIC S7-1500 CPU 1513F-1 PN SIMATIC S7-1500 CPU 1510SP F-1 PN SIPLUS S7-1500 CPU 1515F-2 PN RAIL SIPLUS TIM 1531 IRC SIMATIC S7-1500 CPU 1511F-1 PN SIMATIC S7-1500 CPU 1516F-3 PN/DP SIPLUS ET 200SP CPU 1512SP-1 PN SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL SIPLUS S7-1500 CPU 1511-1 PN SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL

CWE ID-CWE-1286

Improper Validation of Syntactic Correctness of Input

CWE ID-CWE-20

Improper Input Validation

Assigner-Siemens

Assigner-Siemens

CVSS Score-4.9||MEDIUM

EPSS-0.07% / 22.29%

||

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 13:45

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

Action-Not Available

Vendor-Siemens AG

Product-simatic_s7-1500_cpu_1507s simatic_s7-1200_cpu_12_1214fc simatic_s7-1500_cpu_cpu_1513pro-2 simatic_s7-1500_cpu_1511c simatic_s7-1500_cpu_1511t-1_firmware simatic_s7-1500_cpu_1512sp-1 siplus_s7-300_cpu_314 siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware simatic_s7-1200_cpu_12_1214c_firmware simatic_s7-1200_cpu_12_1211c simatic_s7-1500_cpu_1508s_f_firmware simatic_s7-1500_cpu_1510sp-1 simatic_s7-1200_cpu_1212c simatic_s7-1500_cpu_1512spf-1 simatic_s7-1500_cpu_1513-1 simatic_s7-1200_cpu_1212fc_firmware simatic_s7-1500_cpu_1517-3_pn simatic_s7-1500_cpu_1515-2_pn_firmware simatic_s7-1500_cpu_1517f-3_pn\/dp simatic_s7-1500_cpu_1513r-1 simatic_s7-1200_cpu_1215_fc simatic_s7-1500_cpu_1512c_firmware simatic_s7-1500_cpu_1517f-3_pn\/dp_firmware simatic_s7-1200_cpu_12_1215c simatic_s7-1500_cpu_1511-1_firmware simatic_s7-1500_cpu_1511-1_pn simatic_s7-1500_cpu_1517f-3_firmware simatic_s7-1500_cpu_1518f-4_pn\/dp_firmware simatic_s7-1500_cpu_1518hf-4 simatic_s7-1500_cpu_1518-4_pn_firmware siplus_tim_1531_irc_firmware simatic_s7-1500_cpu_1518-4_dp_firmware simatic_s7-1500_cpu_1516tf-3_firmware simatic_s7-1500_cpu_1511f-1_pn_firmware simatic_s7-1500_cpu_1516-3_firmware simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware simatic_s7-1500_cpu_1517-3_pn\/dp simatic_s7-1500_cpu_1517-3 simatic_s7-1500_cpu_1518t-4_firmware simatic_s7-1500_cpu_1508s_f simatic_s7-1500_cpu_15prof-2_firmware simatic_s7-1500_cpu_1513f-1_pn simatic_s7-1200_cpu_1214c_firmware simatic_s7-1500_cpu_1517-3_pn_firmware simatic_s7-1500_cpu_1517-3_dp simatic_s7-1200_cpu_12_1214c simatic_s7-1200_cpu_1211c_firmware simatic_s7-1500_cpu_cpu_1513pro-2_firmware simatic_s7-1200_cpu_1214c siplus_tim_1531_irc simatic_s7-1500_cpu_15prof-2 simatic_s7-1500_cpu_1516tf-3 siplus_s7-300_cpu_315-2_pn\/dp_firmware simatic_s7-1500_cpu_1516f-3_pn\/dp_firmware simatic_s7-1500_cpu_151511f-1_firmware simatic_s7-1500_cpu_1507s_f_firmware simatic_s7-1500_cpu_1516t-3_firmware simatic_s7-1500_cpu_1511t-1 simatic_s7-1500_cpu_1517tf-3 simatic_s7-1500_cpu_1515-2_pn simatic_s7-1200_cpu_1214_fc simatic_s7-1500_cpu_1515-2_firmware simatic_s7-1500_cpu_1516pro-2_firmware tim_1531_irc_firmware simatic_s7-1500_cpu_1515-2 simatic_s7-1500_cpu_1516-3_pn simatic_s7-1500_cpu_1516pro_f_firmware simatic_s7-1500_cpu_1516-3 simatic_s7-1200_cpu_1214fc simatic_s7-1500_cpu_1518f-4_pn\/dp simatic_s7-1500_cpu_1508s_firmware simatic_s7-1500_cpu_1511f-1_firmware simatic_s7-1200_cpu_12_1212fc simatic_s7-1500_cpu_151511c-1 simatic_s7-1500_cpu_1518tf-4_firmware siplus_s7-1200_cp_1243-1 simatic_s7-1500_cpu_1511f-1_pn simatic_s7-1500_cpu_1507s_f siplus_s7-300_cpu_315-2_dp simatic_s7-1500_cpu_1518 simatic_s7-1500_cpu_1513-1_pn_firmware simatic_s7-1200_cpu_1215fc simatic_s7-1500_cpu_1518f-4 simatic_s7-1500_cpu_1516pro_f simatic_s7-1500_cpu_1513r-1_firmware simatic_et_200_sp_open_controller_cpu_1515sp_pc simatic_s7-1500_cpu_1512c-1_firmware simatic_s7-1500_cpu_1513f-1_pn_firmware siplus_et_200sp_cp_1543sp-1_isec_firmware simatic_s7-1500_cpu_1518_firmware simatic_s7-1500_cpu_1518-4_firmware simatic_s7-1500_cpu_1518tf-4 simatic_s7-1200_cpu_1214_fc_firmware siplus_s7-1200_cp_1243-1_rail simatic_s7-1500_cpu_1516t-3 simatic_s7-1500_cpu_1510sp_firmware simatic_s7-1500_cpu_1518-4_pn\/dp_mfp siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware simatic_s7-1200_cpu_1215_fc_firmware simatic_s7-1200_cpu_12_1215fc_firmware simatic_s7-1500_cpu_1515t-2 simatic_s7-1500_cpu_15pro-2 simatic_s7-1500_cpu_1518-4_pn simatic_s7-1200_cpu_12_1212c_firmware simatic_s7-1200_cpu_12_1212fc_firmware simatic_s7-1500_cpu_1511-1_pn_firmware simatic_s7-1500_cpu_15pro-2_firmware simatic_s7-1500_cpu_1515tf-2_firmware tim_1531_irc simatic_s7-1500_cpu_151511c-1_firmware simatic_s7-1200_cpu_12_1217c simatic_s7-1500_cpu_1518-4_pn\/dp_firmware simatic_s7-1500_cpu_1510sp simatic_s7-1200_cpu_12_1217c_firmware simatic_s7-1500_cpu_1518f-4_firmware simatic_s7-1200_cpu_1217c simatic_s7-1500_cpu_151511f-1 simatic_s7-1500_software_controller_firmware simatic_s7-1500_cpu_1511-1 simatic_s7-1500_cpu_1518-4_dp siplus_s7-300_cpu_317-2_pn\/dp_firmware simatic_s7-1200_cpu_1215c_firmware simatic_s7-1500_cpu_1513-1_pn simatic_s7-1200_cpu_1212c_firmware simatic_s7-1500_cpu_1515f-2_firmware simatic_s7-1200_cpu_1217c_firmware simatic_s7-1200_cpu_1214fc_firmware simatic_s7-1500_cpu_cpu_1513prof-2_firmware simatic_s7-1200_cpu_1215c simatic_s7-1500_cpu_1515r-2 simatic_s7-1200_cpu_12_1215fc siplus_et_200sp_cp_1543sp-1_isec simatic_s7-1500_cpu_1513f-1 simatic_s7-1500_cpu_1512c simatic_s7-1500_cpu_1516f-3_pn\/dp simatic_s7-1500_cpu_1511c-1 simatic_s7-1500_cpu_1517f-3 simatic_s7-1500_cpu_1512spf-1_firmware siplus_s7-300_cpu_314_firmware siplus_et_200sp_cp_1543sp-1_isec_tx_rail simatic_s7-1500_cpu_1517tf-3_firmware simatic_s7-1500_cpu_1516f-3_firmware simatic_s7-1500_cpu_1517-3_firmware simatic_s7-1200_cpu_12_1214fc_firmware simatic_s7-1500_software_controller simatic_s7-1500_cpu_1511c-1_firmware simatic_s7-1500_cpu_1517-3_dp_firmware simatic_s7-1500_cpu_1516-3_pn\/dp_firmware simatic_s7-1500_cpu_1518hf-4_firmware simatic_s7-1200_cpu_12_1212c siplus_s7-300_cpu_315-2_pn\/dp simatic_s7-1500_cpu_1511f-1 siplus_s7-300_cpu_317-2_pn\/dp simatic_s7-1500_cpu_1515tf-2 siplus_s7-1200_cp_1243-1_rail_firmware simatic_s7-1500_cpu_1511c_firmware simatic_s7-1500_cpu_1511tf-1 simatic_s7-1500_cpu_1518-4 simatic_s7-1500_cpu_1518-4_pn\/dp siplus_s7-1200_cp_1243-1_firmware simatic_s7-1500_cpu_1511tf-1_firmware simatic_s7-1500_cpu_1517-3_pn\/dp_firmware simatic_s7-1500_cpu_1516-3_dp simatic_s7-1500_cpu_1508s siplus_s7-300_cpu_315-2_dp_firmware simatic_s7-plcsim_advanced_firmware simatic_s7-1500_cpu_1510sp-1_firmware simatic_s7-1500_cpu_1516-3_pn\/dp simatic_s7-1500_cpu_1515f-2_pn_firmware simatic_s7-1500_cpu_1515t-2_firmware siplus_et_200sp_cp_1542sp-1_irc_tx_rail simatic_s7-1500_cpu_1516-3_dp_firmware simatic_s7-1200_cpu_12_1215c_firmware simatic_s7-1500_cpu_1512sp-1_firmware simatic_s7-1200_cpu_1215fc_firmware simatic_s7-1500_cpu_1512c-1 simatic_s7-1500_cpu_1515f-2 simatic_s7-1500_cpu_cpu_1513prof-2 simatic_s7-1500_cpu_1515f-2_pn simatic_s7-1200_cpu_1211c simatic_s7-1500_cpu_1516f-3 simatic_s7-1500_cpu_1516-3_pn_firmware simatic_s7-1200_cpu_12_1211c_firmware simatic_s7-plcsim_advanced simatic_s7-1500_cpu_1513f-1_firmware simatic_s7-1200_cpu_1212fc simatic_s7-1500_cpu_1516pro-2 simatic_s7-1500_cpu_1515r-2_firmware simatic_s7-1500_cpu_1507s_firmware simatic_s7-1500_cpu_1513-1_firmware simatic_s7-1500_cpu_1518t-4 SIMATIC S7-1500 CPU 1512C-1 PN SIMATIC S7-1500 CPU 1517F-3 PN/DP SIMATIC S7-1500 CPU 1515-2 PN SIMATIC S7-1500 CPU 1511T-1 PN SIPLUS S7-1500 CPU 1518-4 PN/DP SIPLUS S7-1500 CPU 1518F-4 PN/DP SIPLUS S7-1500 CPU 1518-4 PN/DP MFP SIMATIC S7-1500 CPU 1515TF-2 PN SIMATIC S7-1500 CPU 1510SP-1 PN SIMATIC S7-1500 CPU 1516-3 PN/DP SIMATIC S7-1500 CPU 1511TF-1 PN SIPLUS S7-1500 CPU 1515F-2 PN SIPLUS S7-1500 CPU 1517H-3 PN SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL SIMATIC S7-1500 CPU 1518HF-4 PN SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN SIPLUS ET 200SP CPU 1512SP-1 PN RAIL SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN SIPLUS ET 200SP CPU 1510SP-1 PN RAIL SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN SIMATIC S7-PLCSIM Advanced SIMATIC S7-1500 CPU 1517-3 PN/DP SIMATIC S7-1500 CPU 1517H-3 PN SIMATIC S7-1500 CPU 1516TF-3 PN/DP SIMATIC S7-1500 CPU 1515T-2 PN SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL SIMATIC S7-1500 CPU 1511C-1 PN SIMATIC S7-1500 CPU 1517TF-3 PN/DP SIMATIC S7-1200 CPU family (incl. SIPLUS variants)SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL SIPLUS S7-1500 CPU 1511-1 PN TX RAIL SIPLUS S7-1500 CPU 1513F-1 PN SIMATIC Drive Controller CPU 1507D TF SIMATIC Drive Controller CPU 1504D TF SIMATIC S7-1500 CPU 1513R-1 PN SIPLUS S7-1500 CPU 1516-3 PN/DP SIMATIC S7-1500 CPU 1515R-2 PN SIMATIC S7-1500 CPU 1512SP F-1 PN TIM 1531 IRC SIPLUS S7-1500 CPU 1511F-1 PN SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL SIMATIC S7-1500 Software Controller V2 SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)SIPLUS ET 200SP CPU 1512SP F-1 PN SIMATIC S7-1500 CPU 1515F-2 PN SIMATIC S7-1500 CPU 1518-4 PN/DP SIMATIC S7-1500 CPU 1513-1 PN SIPLUS ET 200SP CPU 1510SP F-1 PN SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK SIMATIC S7-1500 CPU 1518F-4 PN/DP SIMATIC S7-1500 CPU 1518-4 PN/DP MFP SIPLUS ET 200SP CPU 1510SP-1 PN SIPLUS S7-1500 CPU 1516F-3 PN/DP SIMATIC S7-1500 CPU 1516T-3 PN/DP SIMATIC S7-1500 CPU 1518TF-4 PN/DP SIPLUS S7-1500 CPU 1515R-2 PN TX RAIL SIMATIC S7-1500 CPU 1512SP-1 PN SIMATIC S7-1500 CPU 1518T-4 PN/DP SIMATIC S7-1500 CPU 1511-1 PN SIMATIC S7-1500 CPU 1517T-3 PN/DP SIPLUS S7-1500 CPU 1518HF-4 PN SIPLUS S7-1500 CPU 1513-1 PN SIPLUS S7-1500 CPU 1515R-2 PN SIMATIC S7-1500 CPU 1513F-1 PN SIMATIC S7-1500 CPU 1510SP F-1 PN SIPLUS S7-1500 CPU 1515F-2 PN RAIL SIPLUS TIM 1531 IRC SIMATIC S7-1500 CPU 1511F-1 PN SIMATIC S7-1500 CPU 1516F-3 PN/DP SIPLUS ET 200SP CPU 1512SP-1 PN SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL SIPLUS S7-1500 CPU 1511-1 PN SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL

CWE ID-CWE-1284

Improper Validation of Specified Quantity in Input

Assigner-Siemens

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.14% / 77.53%

||

7 Day CHG~0.00%

Published-09 Feb, 2022 | 15:16

Updated-18 Apr, 2025 | 18:29

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 < V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 < V2.9.4), SIMATIC S7-1500 Software Controller (All versions >= V21.9 < V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packets over port 102/tcp. A restart of the affected device is needed to restore normal operations.

Action-Not Available

Vendor-Siemens AG

Product-simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware simatic_s7-1500_cpu_1516t-3 simatic_s7-1500_cpu_1510sp_firmware simatic_s7-1500_cpu_cpu_1513pro-2 simatic_s7-1500_cpu_1511t-1_firmware simatic_s7-1500_cpu_1512sp-1 simatic_s7-1500_cpu_1510sp-1 simatic_s7-1200_cpu_1212c simatic_s7-1500_cpu_1515t-2 simatic_s7-1500_cpu_1512spf-1 simatic_drive_controller_cpu_1507d_tf_firmware simatic_s7-1500_cpu_1513-1 simatic_s7-1500_cpu_1515tf-2_firmware tim_1531_irc simatic_s7-1200_cpu_1212fc_firmware simatic_s7-1500_cpu_1510sp simatic_s7-1500_cpu_1518f-4_firmware simatic_s7-1200_cpu_1217c simatic_s7-1500_cpu_1513r-1 simatic_s7-1500_cpu_1511-1 simatic_s7-1200_cpu_1215c_firmware simatic_s7-1500_cpu_1517f-3_firmware simatic_s7-1500_cpu_1511-1_firmware simatic_s7-1500_cpu_1518tf-4 simatic_s7-1200_cpu_1212c_firmware simatic_s7-1500_cpu_1515f-2_firmware simatic_s7-1200_cpu_1217c_firmware simatic_s7-1500_cpu_1518hf-4 simatic_s7-1200_cpu_1214fc_firmware simatic_s7-1500_cpu_cpu_1513prof-2_firmware simatic_s7-1200_cpu_1215c simatic_s7-1500_cpu_1515r-2 simatic_s7-1500_cpu_1516tf-3_firmware simatic_s7-1500_cpu_1516-3_firmware simatic_s7-1500_cpu_1513f-1 simatic_s7-1500_cpu_1511c-1 simatic_s7-1500_cpu_1517-3 simatic_s7-1500_cpu_1518t-4_firmware simatic_s7-1500_cpu_1517f-3 simatic_s7-1500_cpu_1512spf-1_firmware simatic_s7-1200_cpu_1214c_firmware simatic_s7-1500_cpu_1517tf-3_firmware simatic_s7-1500_cpu_1516f-3_firmware simatic_s7-1500_cpu_cpu_1513pro-2_firmware simatic_s7-1200_cpu_1211c_firmware simatic_s7-1500_cpu_1517-3_firmware simatic_s7-1200_cpu_1214c simatic_s7-1500_software_controller simatic_s7-1500_cpu_1516tf-3 simatic_s7-1500_cpu_1511c-1_firmware simatic_s7-1500_cpu_1516t-3_firmware simatic_s7-1500_cpu_1518hf-4_firmware simatic_s7-1500_cpu_1511t-1 simatic_drive_controller_cpu_1504d_tf_firmware simatic_s7-1500_cpu_1517tf-3 simatic_s7-1500_cpu_1511f-1 simatic_s7-1500_cpu_1515tf-2 tim_1531_irc_firmware simatic_s7-1500_cpu_1515-2_firmware simatic_s7-1500_cpu_1516pro-2_firmware simatic_s7-1500_cpu_1511tf-1 simatic_s7-1500_cpu_1515-2 simatic_s7-1500_cpu_1518-4 simatic_s7-1500_cpu_1511tf-1_firmware simatic_s7-1500_cpu_1516pro_f_firmware simatic_s7-plcsim_advanced_firmware simatic_s7-1500_cpu_1510sp-1_firmware simatic_s7-1500_cpu_1516-3 simatic_s7-1200_cpu_1214fc simatic_s7-1500_cpu_1515t-2_firmware simatic_drive_controller_cpu_1504d_tf simatic_drive_controller_cpu_1507d_tf simatic_s7-1500_cpu_1511f-1_firmware simatic_s7-1500_cpu_1518tf-4_firmware simatic_s7-1500_cpu_1512sp-1_firmware simatic_s7-1200_cpu_1215fc_firmware simatic_s7-1500_cpu_1512c-1 simatic_s7-1500_cpu_cpu_1513prof-2 simatic_s7-1500_cpu_1515f-2 simatic_s7-1200_cpu_1211c simatic_s7-1500_cpu_1516f-3 simatic_s7-1200_cpu_1215fc simatic_s7-1500_cpu_1518f-4 simatic_s7-1500_cpu_1516pro_f simatic_s7-1500_cpu_1513r-1_firmware simatic_s7-1500_cpu_1512c-1_firmware simatic_s7-1500_cpu_1513f-1_firmware simatic_s7-1200_cpu_1212fc simatic_s7-1500_cpu_1516pro-2 simatic_s7-1500_cpu_1515r-2_firmware simatic_s7-plcsim_advanced simatic_s7-1500_cpu_1513-1_firmware simatic_s7-1500_cpu_1518-4_firmware simatic_s7-1500_cpu_1518t-4 simatic_et_200sp_open_controller_cpu_1515sp_pc2 TIM 1531 IRC SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)SIMATIC S7-PLCSIM Advanced SIMATIC Drive Controller family SIMATIC S7-1200 CPU family (incl. SIPLUS variants)SIMATIC S7-1500 Software Controller SIPLUS TIM 1531 IRC SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

CWE ID-CWE-401

Missing Release of Memory after Effective Lifetime

Assigner-Siemens

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.43% / 79.87%

||

7 Day CHG~0.00%

Published-09 Feb, 2022 | 15:16

Updated-18 Apr, 2025 | 18:33

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 Ready4Linux (All versions), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 < V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 < V2.9.4), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-1500 Software Controller (All versions >= V21.9 < V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packet over port 102/tcp. A restart of the affected device is needed to restore normal operations.

Action-Not Available

Vendor-Siemens AG

Product-simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware simatic_s7-1500_cpu_1516t-3 simatic_s7-1500_cpu_1510sp_firmware simatic_s7-1500_cpu_cpu_1513pro-2 simatic_s7-1500_cpu_1511t-1_firmware simatic_s7-1500_cpu_1512sp-1 simatic_s7-1500_cpu_1510sp-1 simatic_s7-1200_cpu_1212c simatic_s7-1500_cpu_1515t-2 simatic_s7-1500_cpu_1512spf-1 simatic_drive_controller_cpu_1507d_tf_firmware simatic_s7-1500_cpu_1513-1 simatic_s7-1500_cpu_1515tf-2_firmware tim_1531_irc simatic_s7-1200_cpu_1212fc_firmware simatic_s7-1500_cpu_1510sp simatic_s7-1500_cpu_1518f-4_firmware simatic_s7-1200_cpu_1217c simatic_s7-1500_cpu_1513r-1 simatic_s7-1500_cpu_1511-1 simatic_s7-1200_cpu_1215c_firmware simatic_s7-1500_cpu_1517f-3_firmware simatic_s7-1500_cpu_1511-1_firmware simatic_s7-1500_cpu_1518tf-4 simatic_s7-1200_cpu_1212c_firmware simatic_s7-1500_cpu_1515f-2_firmware simatic_s7-1200_cpu_1217c_firmware simatic_s7-1500_cpu_1518hf-4 simatic_s7-1200_cpu_1214fc_firmware simatic_s7-1500_cpu_cpu_1513prof-2_firmware simatic_s7-1200_cpu_1215c simatic_s7-1500_cpu_1515r-2 simatic_s7-1500_cpu_1516tf-3_firmware simatic_s7-1500_cpu_1516-3_firmware simatic_s7-1500_cpu_1513f-1 simatic_s7-1500_cpu_1511c-1 simatic_s7-1500_cpu_1517-3 simatic_s7-1500_cpu_1518t-4_firmware simatic_s7-1500_cpu_1517f-3 simatic_s7-1500_cpu_1512spf-1_firmware simatic_s7-1200_cpu_1214c_firmware simatic_s7-1500_cpu_1517tf-3_firmware simatic_s7-1500_cpu_1516f-3_firmware simatic_s7-1500_cpu_cpu_1513pro-2_firmware simatic_s7-1200_cpu_1211c_firmware simatic_s7-1500_cpu_1517-3_firmware simatic_s7-1200_cpu_1214c simatic_s7-1500_software_controller simatic_s7-1500_cpu_1516tf-3 simatic_s7-1500_cpu_1511c-1_firmware simatic_s7-1500_cpu_1516t-3_firmware simatic_s7-1500_cpu_1518hf-4_firmware simatic_s7-1500_cpu_1511t-1 simatic_drive_controller_cpu_1504d_tf_firmware simatic_s7-1500_cpu_1517tf-3 simatic_s7-1500_cpu_1511f-1 simatic_s7-1500_cpu_1515tf-2 tim_1531_irc_firmware simatic_s7-1500_cpu_1515-2_firmware simatic_s7-1500_cpu_1516pro-2_firmware simatic_s7-1500_cpu_1511tf-1 simatic_s7-1500_cpu_1515-2 simatic_s7-1500_cpu_1518-4 simatic_s7-1500_cpu_1511tf-1_firmware simatic_s7-1500_cpu_1516pro_f_firmware simatic_s7-plcsim_advanced_firmware simatic_s7-1500_cpu_1510sp-1_firmware simatic_s7-1500_cpu_1516-3 simatic_s7-1200_cpu_1214fc simatic_s7-1500_cpu_1515t-2_firmware simatic_drive_controller_cpu_1504d_tf simatic_drive_controller_cpu_1507d_tf simatic_s7-1500_cpu_1511f-1_firmware simatic_s7-1500_cpu_1518tf-4_firmware simatic_s7-1500_cpu_1512sp-1_firmware simatic_s7-1200_cpu_1215fc_firmware simatic_s7-1500_cpu_1512c-1 simatic_s7-1500_cpu_cpu_1513prof-2 simatic_s7-1500_cpu_1515f-2 simatic_s7-1200_cpu_1211c simatic_s7-1500_cpu_1516f-3 simatic_s7-1200_cpu_1215fc simatic_s7-1500_cpu_1518f-4 simatic_s7-1500_cpu_1516pro_f simatic_s7-1500_cpu_1513r-1_firmware simatic_s7-1500_cpu_1512c-1_firmware simatic_s7-1500_cpu_1513f-1_firmware simatic_s7-1200_cpu_1212fc simatic_s7-1500_cpu_1516pro-2 simatic_s7-1500_cpu_1515r-2_firmware simatic_s7-plcsim_advanced simatic_s7-1500_cpu_1513-1_firmware simatic_s7-1500_cpu_1518-4_firmware simatic_s7-1500_cpu_1518t-4 simatic_et_200sp_open_controller_cpu_1515sp_pc2 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 Ready4Linux TIM 1531 IRC SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)SIMATIC S7-PLCSIM Advanced SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)SIMATIC Drive Controller family SIMATIC S7-1200 CPU family (incl. SIPLUS variants)SIMATIC S7-1500 Software Controller SIPLUS TIM 1531 IRC SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

CWE ID-CWE-672

Operation on a Resource after Expiration or Release

Assigner-Siemens

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.43% / 79.87%

||

7 Day CHG~0.00%

Published-09 Feb, 2022 | 15:16

Updated-18 Apr, 2025 | 18:33

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 < V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 < V2.9.4), SIMATIC S7-1500 Software Controller (All versions >= V21.9 < V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packets over port 102/tcp. A restart of the affected device is needed to restore normal operations.

Action-Not Available

Vendor-Siemens AG

Product-simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware simatic_s7-1500_cpu_1516t-3 simatic_s7-1500_cpu_1510sp_firmware simatic_s7-1500_cpu_cpu_1513pro-2 simatic_s7-1500_cpu_1511t-1_firmware simatic_s7-1500_cpu_1512sp-1 simatic_s7-1500_cpu_1510sp-1 simatic_s7-1200_cpu_1212c simatic_s7-1500_cpu_1515t-2 simatic_s7-1500_cpu_1512spf-1 simatic_drive_controller_cpu_1507d_tf_firmware simatic_s7-1500_cpu_1513-1 simatic_s7-1500_cpu_1515tf-2_firmware tim_1531_irc simatic_s7-1200_cpu_1212fc_firmware simatic_s7-1500_cpu_1510sp simatic_s7-1500_cpu_1518f-4_firmware simatic_s7-1200_cpu_1217c simatic_s7-1500_cpu_1513r-1 simatic_s7-1500_cpu_1511-1 simatic_s7-1200_cpu_1215c_firmware simatic_s7-1500_cpu_1517f-3_firmware simatic_s7-1500_cpu_1511-1_firmware simatic_s7-1500_cpu_1518tf-4 simatic_s7-1200_cpu_1212c_firmware simatic_s7-1500_cpu_1515f-2_firmware simatic_s7-1200_cpu_1217c_firmware simatic_s7-1500_cpu_1518hf-4 simatic_s7-1200_cpu_1214fc_firmware simatic_s7-1500_cpu_cpu_1513prof-2_firmware simatic_s7-1200_cpu_1215c simatic_s7-1500_cpu_1515r-2 simatic_s7-1500_cpu_1516tf-3_firmware simatic_s7-1500_cpu_1516-3_firmware simatic_s7-1500_cpu_1513f-1 simatic_s7-1500_cpu_1511c-1 simatic_s7-1500_cpu_1517-3 simatic_s7-1500_cpu_1518t-4_firmware simatic_s7-1500_cpu_1517f-3 simatic_s7-1500_cpu_1512spf-1_firmware simatic_s7-1200_cpu_1214c_firmware simatic_s7-1500_cpu_1517tf-3_firmware simatic_s7-1500_cpu_1516f-3_firmware simatic_s7-1500_cpu_cpu_1513pro-2_firmware simatic_s7-1200_cpu_1211c_firmware simatic_s7-1500_cpu_1517-3_firmware simatic_s7-1200_cpu_1214c simatic_s7-1500_software_controller simatic_s7-1500_cpu_1516tf-3 simatic_s7-1500_cpu_1511c-1_firmware simatic_s7-1500_cpu_1516t-3_firmware simatic_s7-1500_cpu_1518hf-4_firmware simatic_s7-1500_cpu_1511t-1 simatic_drive_controller_cpu_1504d_tf_firmware simatic_s7-1500_cpu_1517tf-3 simatic_s7-1500_cpu_1511f-1 simatic_s7-1500_cpu_1515tf-2 tim_1531_irc_firmware simatic_s7-1500_cpu_1515-2_firmware simatic_s7-1500_cpu_1516pro-2_firmware simatic_s7-1500_cpu_1511tf-1 simatic_s7-1500_cpu_1515-2 simatic_s7-1500_cpu_1518-4 simatic_s7-1500_cpu_1511tf-1_firmware simatic_s7-1500_cpu_1516pro_f_firmware simatic_s7-plcsim_advanced_firmware simatic_s7-1500_cpu_1510sp-1_firmware simatic_s7-1500_cpu_1516-3 simatic_s7-1200_cpu_1214fc simatic_s7-1500_cpu_1515t-2_firmware simatic_drive_controller_cpu_1504d_tf simatic_drive_controller_cpu_1507d_tf simatic_s7-1500_cpu_1511f-1_firmware simatic_s7-1500_cpu_1518tf-4_firmware simatic_s7-1500_cpu_1512sp-1_firmware simatic_s7-1200_cpu_1215fc_firmware simatic_s7-1500_cpu_1512c-1 simatic_s7-1500_cpu_cpu_1513prof-2 simatic_s7-1500_cpu_1515f-2 simatic_s7-1200_cpu_1211c simatic_s7-1500_cpu_1516f-3 simatic_s7-1200_cpu_1215fc simatic_s7-1500_cpu_1518f-4 simatic_s7-1500_cpu_1516pro_f simatic_s7-1500_cpu_1513r-1_firmware simatic_s7-1500_cpu_1512c-1_firmware simatic_s7-1500_cpu_1513f-1_firmware simatic_s7-1200_cpu_1212fc simatic_s7-1500_cpu_1516pro-2 simatic_s7-1500_cpu_1515r-2_firmware simatic_s7-plcsim_advanced simatic_s7-1500_cpu_1513-1_firmware simatic_s7-1500_cpu_1518-4_firmware simatic_s7-1500_cpu_1518t-4 simatic_et_200sp_open_controller_cpu_1515sp_pc2 TIM 1531 IRC SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)SIMATIC S7-PLCSIM Advanced SIMATIC Drive Controller family SIMATIC S7-1200 CPU family (incl. SIPLUS variants)SIMATIC S7-1500 Software Controller SIPLUS TIM 1531 IRC SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

CWE ID-CWE-672

Operation on a Resource after Expiration or Release