Publication Date: 2019-10-08
Last Update: 2022-02-08
Current Version: V1.7
CVSS v3.1 Base Score: 7.5

Affected Product and Versions Remediation
Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller:
All versions < V4.1.1 Patch 05
Update to V4.1.1 Patch 05
https://support.industry.siemens.com/cs/ww/en/view/109755160
See further recommendations from section Workarounds and Mitigations
Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200:
All versions < V4.5.0 Patch 01
Update to V4.5.0 Patch 01
https://support.industry.siemens.com/cs/ww/en/view/109760397
See further recommendations from section Workarounds and Mitigations
Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P:
All versions < V4.5.0
Update to V4.5.0
https://support.industry.siemens.com/cs/ww/en/view/109750012
See further recommendations from section Workarounds and Mitigations
SCALANCE X-200IRT switch family (incl. SIPLUS NET variants):
All versions < V5.2.1
Update to V5.4.2
https://support.industry.siemens.com/cs/ww/en/view/109763309
See further recommendations from section Workarounds and Mitigations
SIMATIC ET200ecoPN, 4AO U/I 4xM12 (6ES7145-6HD00-0AB0):
All versions
Currently no remediation is planned
See recommendations from section Workarounds and Mitigations
SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 (6ES7147-6BG00-0AB0):
All versions
Currently no remediation is planned
See recommendations from section Workarounds and Mitigations
SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 (6ES7142-6BR00-0AB0):
All versions
Currently no remediation is planned
See recommendations from section Workarounds and Mitigations
SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 (6ES7144-6KD50-0AB0):
All versions
Currently no remediation is planned
See recommendations from section Workarounds and Mitigations
SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 (6ES7144-6KD00-0AB0):
All versions
Currently no remediation is planned
See recommendations from section Workarounds and Mitigations
SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 (6ES7141-6BF00-0AB0):
All versions
Currently no remediation is planned
See recommendations from section Workarounds and Mitigations
SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 (6ES7141-6BG00-0AB0):
All versions
Currently no remediation is planned
See recommendations from section Workarounds and Mitigations
SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 (6ES7142-6BF50-0AB0):
All versions
Currently no remediation is planned
See recommendations from section Workarounds and Mitigations
SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 (6ES7142-6BF00-0AB0):
All versions
Currently no remediation is planned
See recommendations from section Workarounds and Mitigations
SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 (6ES7142-6BG00-0AB0):
All versions
Currently no remediation is planned
See recommendations from section Workarounds and Mitigations
SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 (6ES7141-6BH00-0AB0):
All versions
Currently no remediation is planned
See recommendations from section Workarounds and Mitigations
SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 (6ES7142-6BH00-0AB0):
All versions
Currently no remediation is planned
See recommendations from section Workarounds and Mitigations
SIMATIC ET200ecoPN: IO-Link Master (6ES7148-6JA00-0AB0):
All versions
Currently no remediation is planned
See recommendations from section Workarounds and Mitigations
SIMATIC ET200M (incl. SIPLUS variants):
All versions
Currently no remediation is planned
See recommendations from section Workarounds and Mitigations
SIMATIC ET200pro:
All versions
Currently no remediation is planned
See recommendations from section Workarounds and Mitigations
SIMATIC ET200S (incl. SIPLUS variants):
All versions
Currently no remediation is planned
See recommendations from section Workarounds and Mitigations
SIMATIC NET CP 1604:
All versions < V2.8
Update to V2.8
https://support.industry.siemens.com/cs/ww/en/view/109762689
See further recommendations from section Workarounds and Mitigations
SIMATIC NET CP 1616:
All versions < V2.8
Update to V2.8
https://support.industry.siemens.com/cs/ww/en/view/109762689
See further recommendations from section Workarounds and Mitigations
SIMATIC PN/PN Coupler 6ES7158-3AD01-0XA0 (incl. SIPLUS NET variant):
All versions
Currently no remediation is available
See recommendations from section Workarounds and Mitigations
SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants):
All versions < V3.X.17
Update to V3.X.17
https://support.industry.siemens.com/cs/ww/en/ps/13752/dl
See further recommendations from section Workarounds and Mitigations
SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants):
All versions
Currently no remediation is available
See recommendations from section Workarounds and Mitigations
SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants):
All versions
Currently no remediation is available
See recommendations from section Workarounds and Mitigations
SIMATIC WinAC RTX (F) 2010:
All versions < SIMATIC WinAC RTX 2010 SP3
Update to SIMATIC WinAC RTX 2010 SP3 and apply BIOS and Microsoft Windows updates
https://support.industry.siemens.com/cs/ww/en/view/109765109
See further recommendations from section Workarounds and Mitigations
SIMOTION (incl. SIPLUS variants):
All versions
Currently no remediation is available
See recommendations from section Workarounds and Mitigations
SINAMICS DCM:
All versions < V1.5 HF1
Update to V1.5 HF1
https://support.industry.siemens.com/cs/us/en/view/44029688
See further recommendations from section Workarounds and Mitigations
SINAMICS DCP:
All versions < V1.3
Update to V1.3
https://support.industry.siemens.com/cs/ww/de/view/109773826
See further recommendations from section Workarounds and Mitigations
SINAMICS G110M V4.7 Control Unit:
All versions < V4.7 SP10 HF5
Update to V4.7 SP10 HF5
https://support.industry.siemens.com/cs/us/en/view/109756820
See further recommendations from section Workarounds and Mitigations
SINAMICS G120 V4.7 Control Unit (incl. SIPLUS variants):
All versions < V4.7 SP10 HF5
Update to V4.7 SP10 HF5
https://support.industry.siemens.com/cs/us/en/view/109756820
See further recommendations from section Workarounds and Mitigations
SINAMICS G130 V4.7 Control Unit:
All versions < V4.7 HF29
Update to V4.7 HF29 or upgrade to V5.2 HF2
https://support.industry.siemens.com/cs/ww/en/view/103433117/
See further recommendations from section Workarounds and Mitigations
SINAMICS G150 Control Unit:
All versions < V4.8
Currently no remediation is available
See recommendations from section Workarounds and Mitigations
SINAMICS GH150 V4.7 Control Unit:
All versions
Update to V4.8 SP2 HF9
The update can be obtained from your Siemens representative or via Siemens customer service.
See further recommendations from section Workarounds and Mitigations
SINAMICS GL150 V4.7 Control Unit:
All versions
Update to V4.8 SP2 HF9
The update can be obtained from your Siemens representative or via Siemens customer service.
See further recommendations from section Workarounds and Mitigations
SINAMICS GM150 V4.7 Control Unit:
All versions
Update to V4.8 SP2 HF9
The update can be obtained from your Siemens representative or via Siemens customer service.
See further recommendations from section Workarounds and Mitigations
SINAMICS S110 Control Unit:
All versions
Currently no remediation is available
See recommendations from section Workarounds and Mitigations
SINAMICS S120 V4.7 Control Unit and CBE20 (incl. SIPLUS variants):
All versions < V4.7 HF34
Update to V4.7 HF34 or upgrade to V5.2 HF2
https://support.industry.siemens.com/cs/us/en/view/92522512
See further recommendations from section Workarounds and Mitigations
SINAMICS S150 Control Unit:
All versions < V4.8
Currently no remediation is available
See recommendations from section Workarounds and Mitigations
SINAMICS SL150 V4.7 Control Unit:
All versions < V4.7 HF33
Update to V4.7 HF33
The update can be obtained from your Siemens representative or via Siemens customer service.
See further recommendations from section Workarounds and Mitigations
SINAMICS SM120 V4.7 Control Unit:
All versions
Currently no remediation is available
See recommendations from section Workarounds and Mitigations
SINUMERIK 828D:
All versions < V4.8 SP5
Update to V4.8 SP5
The update can be obtained from your Siemens representative or via Siemens customer service.
See further recommendations from section Workarounds and Mitigations
SINUMERIK 840D sl:
All versions
Currently no remediation is available
See recommendations from section Workarounds and Mitigations

CVSS v3.1 Base Score 7.5
CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
CWE: CWE-400: Uncontrolled Resource Consumption

https://www.siemens.com/cert/advisories