Publication Date:
Last Update:
Current Version: V1.2
CVSS v3.1 Base Score: 7.5
Affected Product and Versions Remediation

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V30.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.2
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.2
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.2
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.2
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions < V30.1.0
affected by all CVEs

All versions < V6.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.1.2
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.0
affected by all CVEs

All versions < V3.1.2
affected by all CVEs
  • Limit access to port 102/tcp to trusted users and systems only

Product-specific remediations or mitigations can be found in the section Affected Products and Solution.
Please follow the General Security Recommendations.

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

Un-/Collapse All

This chapter describes all vulnerabilities (CVE-IDs) addressed in this security advisory. Wherever applicable, it also documents the product-specific impact of the individual vulnerabilities.

CVSS v3.1 Base Score 7.5
CVSS v3.1 Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
CWE CWE-416: Use After Free

  • Maurice Joren for reporting and coordinated disclosure
  • Yu Cong for reporting and coordinated disclosure

https://www.siemens.com/cert/advisories
V1.0 (2023-12-12): Publication Date
V1.1 (2024-03-12): Added fix version information for following SIMATIC S7-1500 CPUs: 1513R-1 PN (6ES7513-1RM03-0AB0), 1515R-2 PN (6ES7515-2RN03-0AB0), 1517H-3 PN (6ES7517-3HP00-0AB0), 1518HF-4 PN (6ES7518-4JP00-0AB0) and SIMATIC S7-1500 Software Controller
V1.2 (2024-05-14): Added fix for SIMATIC ET 200SP Open Controller CPU 1515SP PC2, SIPLUS S7-1500 CPU 1517H-3 PN (6AG1517-3HP00-4AB0) and SIPLUS S7-1500 CPU 1518HF-4 PN (6AG1518-4JP00-4AB0)