Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSiemens Dk Standard Ethernet Controller
HWSiemensall versionsSiemens Dk Standard Ethernet Controller Firmware
OSSiemensall versionsSiemens Ek Ertec 200
HWSiemensall versionsSiemens Ek Ertec 200 Firmware
OSSiemensall versionsSiemens Ek Ertec 200p
HWSiemensall versionsSiemens Ek Ertec 200p Firmware
OSSiemens4.6< 4.6Siemens Simatic Cfu Pa
HWSiemensall versionsSiemens Simatic Cfu Pa Firmware
OSSiemens< 1.2.0Siemens Simatic Et 200al
HWSiemensall versionsSiemens Simatic Et 200al Firmware
OSSiemensall versionsSiemens Simatic Et 200ecopn
HWSiemensall versionsSiemens Simatic Et 200ecopn Firmware
OSSiemensall versionsSiemens Simatic Et 200m
HWSiemensall versionsSiemens Simatic Et 200m Firmware
OSSiemensall versionsSiemens Simatic Et 200mp Im 155 5 Pn Ba
HWSiemensall versionsSiemens Simatic Et 200mp Im 155 5 Pn Ba Firmware
OSSiemens< 4.3.0Siemens Simatic Et 200mp Im 155 5 Pn Hf
HWSiemensall versionsSiemens Simatic Et 200mp Im 155 5 Pn Hf Firmware
OSSiemens< 4.4.0Siemens Simatic Et 200mp Im 155 5 Pn St
HWSiemensall versionsSiemens Simatic Et 200mp Im 155 5 Pn St Firmware
OSSiemensall versionsSiemens Simatic Et 200pro
HWSiemensall versionsSiemens Simatic Et 200pro Firmware
OSSiemensall versionsSiemens Simatic Et 200s
HWSiemensall versionsSiemens Simatic Et 200s Firmware
OSSiemensall versionsSiemens Simatic Et 200sp Im 155 6 Pn\/2 Hf
HWSiemensall versionsSiemens Simatic Et 200sp Im 155 6 Pn\/2 Hf Firmware
OSSiemens< 4.2.2Siemens Simatic Et 200sp Im 155 6 Pn\/3 Hf
HWSiemensall versionsSiemens Simatic Et 200sp Im 155 6 Pn\/3 Hf Firmware
OSSiemens< 4.2.1Siemens Simatic Et 200sp Im 155 6 Pn Ba
HWSiemensall versionsSiemens Simatic Et 200sp Im 155 6 Pn Ba Firmware
OSSiemensall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
Related vulnerabilities
CVE-2021-27384CRITICAL9.8PL ✓same product
Siemens SmartVNC — podatność out-of-bounds w obsłudze układu urządzenia (RCE)
CVE-2020-15798CRITICAL9.8PL ✓same product
Brak uwierzytelnienia w usłudze telnet paneli Siemens SIMATIC HMI
CVE-2023-28831HIGH8.7same product
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability tha...
CVE-2021-40365HIGH7.5same product
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could all...
CVE-2022-40227HIGH7.5same product
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V17 ...