Publication Date: 2018-03-20
Last Update: 2022-06-14
Current Version: V1.7
CVSS v3.1 Base Score: 5.3

Affected Product and Versions Remediation
SIMATIC CP 343-1 (incl. SIPLUS variants):
All versions
Currently no fix is planned
See recommendations from section Workarounds and Mitigations
SIMATIC CP 343-1 Advanced (incl. SIPLUS variants):
All versions
Currently no fix is available
See recommendations from section Workarounds and Mitigations
SIMATIC CP 443-1 (incl. SIPLUS variants):
All versions
Currently no fix is available
See recommendations from section Workarounds and Mitigations
SIMATIC CP 443-1 Advanced (incl. SIPLUS variants):
All versions
Currently no fix is planned
See recommendations from section Workarounds and Mitigations
SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants):
All versions < V3.X.16
Update to V3.X.16
https://support.industry.siemens.com/cs/ww/en/ps/13752/dl
See further recommendations from section Workarounds and Mitigations
SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants):
All versions < V6.0.9
Update to V6.0.9
https://support.industry.siemens.com/cs/ww/en/view/109474550
See further recommendations from section Workarounds and Mitigations
SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants):
All versions < V6.0.7
Update to V6.0.7
https://support.industry.siemens.com/cs/ww/en/view/109474874
See further recommendations from section Workarounds and Mitigations
SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants):
All versions
Currently no fix is available
See recommendations from section Workarounds and Mitigations
SIMATIC S7-410 CPU family (incl. SIPLUS variants):
All versions < V8.1
Update to V8.1 or newer
https://support.industry.siemens.com/cs/ww/en/view/109476571
See further recommendations from section Workarounds and Mitigations
SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants):
All versions < V1.7.0
Update to V1.8.5 or newer
https://support.industry.siemens.com/cs/ww/en/view/109478459
See further recommendations from section Workarounds and Mitigations
SIMATIC S7-1500 Software Controller (incl. F):
All versions < V1.7.0
Update to V1.8.5 or newer
https://support.industry.siemens.com/cs/ww/en/view/109478528
See further recommendations from section Workarounds and Mitigations
SIMATIC WinAC RTX (F) 2010:
All versions < SIMATIC WinAC RTX 2010 SP3
Update to SIMATIC WinAC RTX 2010 SP3 and apply BIOS and Microsoft Windows updates
https://support.industry.siemens.com/cs/ww/en/view/109765109
See further recommendations from section Workarounds and Mitigations
SINUMERIK 828D:
All versions < V4.7 SP6 HF1
Update to V4.7 SP6 HF1
SINUMERIK software can be obtained from your local Siemens account manager
See further recommendations from section Workarounds and Mitigations
Softnet PROFINET IO for PC-based Windows systems:
All versions
Currently no fix is available
See recommendations from section Workarounds and Mitigations

CVSS v3.1 Base Score 5.3
CVSS Vector CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
CWE: CWE-20: Improper Input Validation

https://www.siemens.com/cert/advisories