CVE-2021-37205: falha de alta gravidade em Siemens SIMATIC Drive Controller family
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar SIMATIC S7-PLCSIM Advanced+ Monitorar SIMATIC S7-1500 Software Controller
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 1.6%
A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 < V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 < V2.9.4), SIMATIC S7-1500 Software Controller (All versions >= V21.9 < V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packets over port 102/tcp. A restart of the affected device is needed to restore normal operations.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
Produtos afetados
Siemens · SIMATIC Drive Controller familySiemens · SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)Siemens · SIMATIC S7-1200 CPU family (incl. SIPLUS variants)Siemens · SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)Siemens · SIMATIC S7-1500 Software ControllerSiemens · SIMATIC S7-PLCSIM AdvancedSiemens · SIPLUS TIM 1531 IRCSiemens · TIM 1531 IRCCVEs relacionadas — Siemens SIMATIC Drive Controller family
No mesmo produto, das mais perigosas para as menos.