-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# SSA-599968: Denial-of-Service Vulnerability in Profinet Devices

Publication Date:        2021-07-13
Last Update:             2022-04-12
Current Version:         1.5
CVSS v3.1 Base Score:    7.5

SUMMARY
=======

A vulnerability in affected devices could allow an attacker to perform a
denial-of-service attack if a large amount of Profinet Discovery and
Configuration Protocol (DCP) reset packets is sent to the affected
devices.

Siemens has released updates for several affected products and
recommends to update to the latest versions. Siemens is preparing
further updates and recommends specific countermeasures for products
where updates are not, or not yet available.


AFFECTED PRODUCTS AND SOLUTION
==============================


* Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet
Controller
  - Affected versions:
       All versions
  - Remediation:
       Currently no fix is planned
       See recommendations from section "Workarounds and Mitigations"

* Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
  - Affected versions:
       All versions
  - Remediation:
       Currently no fix is planned
       See recommendations from section "Workarounds and Mitigations"

* Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P
  - Affected versions:
       All versions < V4.7
  - Remediation:
       Update to V4.7 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109784253/

* RUGGEDCOM RM1224 (6GK6108-4AM00)
  - Affected versions:
       All Versions < V6.4
  - Remediation:
       Update to V6.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109794349/

* SCALANCE M804PB (6GK5804-0AP00-2AA2)
  - Affected versions:
       All Versions < V6.4
  - Remediation:
       Update to V6.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109794349/

* SCALANCE M812-1 ADSL-Router
  - Affected versions:
       All Versions < V6.4
  - Remediation:
       Update to V6.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109794349/

* SCALANCE M816-1 ADSL-Router
  - Affected versions:
       All Versions < V6.4
  - Remediation:
       Update to V6.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109794349/

* SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
  - Affected versions:
       All Versions < V6.4
  - Remediation:
       Update to V6.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109794349/

* SCALANCE M874-2 (6GK5874-2AA00-2AA2)
  - Affected versions:
       All Versions < V6.4
  - Remediation:
       Update to V6.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109794349/

* SCALANCE M874-3 (6GK5874-3AA00-2AA2)
  - Affected versions:
       All Versions < V6.4
  - Remediation:
       Update to V6.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109794349/

* SCALANCE M876-3 (6GK5876-3AA02-2BA2)
  - Affected versions:
       All Versions < V6.4
  - Remediation:
       Update to V6.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109794349/

* SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
  - Affected versions:
       All Versions < V6.4
  - Remediation:
       Update to V6.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109794349/

* SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
  - Affected versions:
       All Versions < V6.4
  - Remediation:
       Update to V6.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109794349/

* SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
  - Affected versions:
       All Versions < V6.4
  - Remediation:
       Update to V6.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109794349/

* SCALANCE S615 (6GK5615-0AA00-2AA2)
  - Affected versions:
       All Versions < V6.4
  - Remediation:
       Update to V6.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109794349/

* SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0)
  - Affected versions:
       All versions < V3.0.0
  - Remediation:
       Update to V3.0.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808629/

* SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0)
  - Affected versions:
       All versions < V3.0.0
  - Remediation:
       Update to V3.0.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808629/

* SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0)
  - Affected versions:
       All versions < V3.0.0
  - Remediation:
       Update to V3.0.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808629/

* SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0)
  - Affected versions:
       All versions < V3.0.0
  - Remediation:
       Update to V3.0.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808629/

* SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0)
  - Affected versions:
       All versions < V3.0.0
  - Remediation:
       Update to V3.0.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808629/

* SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0)
  - Affected versions:
       All versions < V3.0.0
  - Remediation:
       Update to V3.0.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808629/

* SCALANCE W-700 IEEE 802.11n family
  - Affected versions:
       All versions
  - Remediation:
       Currently no fix is planned
       See recommendations from section "Workarounds and Mitigations"

* SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)
  - Affected versions:
       All Versions < V5.5.0
  - Remediation:
       Update to V5.5.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109793952/

* SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3)
  - Affected versions:
       All Versions < V5.5.0
  - Remediation:
       Update to V5.5.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109793952/

* SCALANCE X201-3P IRT PRO (6GK5201-3BH00-2BD2)
  - Affected versions:
       All Versions < V5.5.0
  - Remediation:
       Update to V5.5.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109793952/

* SCALANCE X202-2IRT (6GK5202-2BB00-2BA3)
  - Affected versions:
       All Versions < V5.5.0
  - Remediation:
       Update to V5.5.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109793952/

* SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3)
  - Affected versions:
       All Versions < V5.5.0
  - Remediation:
       Update to V5.5.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109793952/

* SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6)
  - Affected versions:
       All Versions < V5.5.0
  - Remediation:
       Update to V5.5.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109793952/

* SCALANCE X204-2 (6GK5204-2BB10-2AA3)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE X204-2FM (6GK5204-2BB11-2AA3)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE X204-2LD (6GK5204-2BC10-2AA3)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE X204-2TS (6GK5204-2BB10-2CA2)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE X204IRT (6GK5204-0BA00-2BA3)
  - Affected versions:
       All Versions < V5.5.0
  - Remediation:
       Update to V5.5.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109793952/

* SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6)
  - Affected versions:
       All Versions < V5.5.0
  - Remediation:
       Update to V5.5.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109793952/

* SCALANCE X206-1 (6GK5206-1BB10-2AA3)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE X206-1LD (incl. SIPLUS NET variant)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE X208 (incl. SIPLUS NET variant)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE X208PRO (6GK5208-0HA10-2AA6)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE X212-2 (6GK5212-2BB00-2AA3)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE X212-2LD (6GK5212-2BC00-2AA3)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE X216 (6GK5216-0BA00-2AA3)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE X224 (6GK5224-0BA00-2AA3)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE X302-7 EEC (2x 24V) (6GK5302-7GD00-2EA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X302-7 EEC (2x 24V, coated) (6GK5302-7GD00-2GA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X302-7 EEC (2x 230V) (6GK5302-7GD00-4EA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X302-7 EEC (2x 230V, coated) (6GK5302-7GD00-4GA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X302-7 EEC (24V) (6GK5302-7GD00-1EA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X302-7 EEC (24V, coated) (6GK5302-7GD00-1GA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X302-7 EEC (230V) (6GK5302-7GD00-3EA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X302-7 EEC (230V, coated) (6GK5302-7GD00-3GA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X304-2FE (6GK5304-2BD00-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X306-1LD FE (6GK5306-1BF00-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X307-2 EEC (2x 24V) (6GK5307-2FD00-2EA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X307-2 EEC (2x 24V, coated) (6GK5307-2FD00-2GA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X307-2 EEC (2x 230V) (6GK5307-2FD00-4EA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X307-2 EEC (2x 230V, coated) (6GK5307-2FD00-4GA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X307-2 EEC (24V) (6GK5307-2FD00-1EA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X307-2 EEC (24V, coated) (6GK5307-2FD00-1GA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X307-2 EEC (230V) (6GK5307-2FD00-3EA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X307-2 EEC (230V, coated) (6GK5307-2FD00-3GA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X307-3 (6GK5307-3BL00-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X307-3 (6GK5307-3BL10-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X307-3LD (6GK5307-3BM00-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X307-3LD (6GK5307-3BM10-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X308-2 (6GK5308-2FL00-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X308-2 (6GK5308-2FL10-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X308-2LD (6GK5308-2FM00-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X308-2LD (6GK5308-2FM10-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X308-2LH (6GK5308-2FN00-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X308-2LH (6GK5308-2FN10-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X308-2LH+ (6GK5308-2FP00-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X308-2LH+ (6GK5308-2FP10-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X308-2M (6GK5308-2GG00-2AA2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X308-2M (6GK5308-2GG10-2AA2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X308-2M PoE (6GK5308-2QG00-2AA2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X308-2M PoE (6GK5308-2QG10-2AA2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X308-2M TS (6GK5308-2GG00-2CA2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X308-2M TS (6GK5308-2GG10-2CA2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X310 (6GK5310-0FA00-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X310 (6GK5310-0FA10-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X310FE (6GK5310-0BA00-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X310FE (6GK5310-0BA10-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X320-1 FE (6GK5320-1BD00-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X320-1-2LD FE (6GK5320-3BF00-2AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE X408-2 (6GK5408-2FD00-2AA2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XB-200
  - Affected versions:
       All versions < V4.3
  - Remediation:
       Update to V4.3 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109799569/

* SCALANCE XC-200
  - Affected versions:
       All versions < V4.3
  - Remediation:
       Update to V4.3 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109799569/

* SCALANCE XF201-3P IRT (6GK5201-3JR00-2BA6)
  - Affected versions:
       All Versions < V5.5.0
  - Remediation:
       Update to V5.5.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109793952/

* SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2)
  - Affected versions:
       All Versions < V5.5.0
  - Remediation:
       Update to V5.5.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109793952/

* SCALANCE XF204 (6GK5204-0BA00-2AF2)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE XF204-2 (incl. SIPLUS NET variant)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2)
  - Affected versions:
       All Versions < V5.5.0
  - Remediation:
       Update to V5.5.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109793952/

* SCALANCE XF204IRT (6GK5204-0BA00-2BF2)
  - Affected versions:
       All Versions < V5.5.0
  - Remediation:
       Update to V5.5.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109793952/

* SCALANCE XF206-1 (6GK5206-1BC00-2AF2)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE XF208 (6GK5208-0BA00-2AF2)
  - Affected versions:
       All versions < V5.2.5
  - Remediation:
       Update to V5.2.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801131/

* SCALANCE XF-200BA
  - Affected versions:
       All versions < V4.3
  - Remediation:
       Update to V4.3 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109799569/

* SCALANCE XM400
  - Affected versions:
       All versions < V6.3.1
  - Remediation:
       Update to V6.3.1 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109782067/

* SCALANCE XP-200
  - Affected versions:
       All versions < V4.3
  - Remediation:
       Update to V4.3 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109799569/

* SCALANCE XR324-4M EEC (2x 24V, ports on front) (6GK5324-4GG00-2ER2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M EEC (2x 24V, ports on front) (6GK5324-4GG10-2ER2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M EEC (2x 24V, ports on rear) (6GK5324-4GG00-2JR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M EEC (2x 24V, ports on rear) (6GK5324-4GG10-2JR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) (6GK5324-4GG00-4ER2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) (6GK5324-4GG10-4ER2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) (6GK5324-4GG00-4JR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) (6GK5324-4GG10-4JR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M EEC (24V, ports on front) (6GK5324-4GG00-1ER2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M EEC (24V, ports on front) (6GK5324-4GG10-1ER2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M EEC (24V, ports on rear) (6GK5324-4GG00-1JR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M EEC (24V, ports on rear) (6GK5324-4GG10-1JR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) (6GK5324-4GG00-3ER2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) (6GK5324-4GG10-3ER2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) (6GK5324-4GG00-3JR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) (6GK5324-4GG10-3JR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M PoE (24V, ports on front) (6GK5324-4QG00-1AR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M PoE (24V, ports on rear) (6GK5324-4QG00-1HR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M PoE (230V, ports on front) (6GK5324-4QG00-3AR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M PoE (230V, ports on rear) (6GK5324-4QG00-3HR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-4M PoE TS (24V, ports on front) (6GK5324-4QG00-1CR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-12M (24V, ports on front) (6GK5324-0GG00-1AR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-12M (24V, ports on front) (6GK5324-0GG10-1AR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-12M (24V, ports on rear) (6GK5324-0GG00-1HR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-12M (24V, ports on rear) (6GK5324-0GG10-1HR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-12M (230V, ports on front) (6GK5324-0GG00-3AR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-12M (230V, ports on front) (6GK5324-0GG10-3AR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-12M (230V, ports on rear) (6GK5324-0GG00-3HR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-12M (230V, ports on rear) (6GK5324-0GG10-3HR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-12M TS (24V) (6GK5324-0GG00-1CR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR324-12M TS (24V) (6GK5324-0GG10-1CR2)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SCALANCE XR500
  - Affected versions:
       All versions < V6.3.1
  - Remediation:
       Update to V6.3.1 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109782065/

* SIMATIC CFU PA (6ES7655-5PX11-0XX0)
  - Affected versions:
       All versions
  - Remediation:
       Currently no fix is available
       See recommendations from section "Workarounds and Mitigations"

* SIMATIC CM 1542-1
  - Affected versions:
       All versions < V3.0
  - Remediation:
       Update to V3.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109801629/

* SIMATIC CP1616/CP1604
  - Affected versions:
       All Versions >= V2.7
  - Remediation:
       Currently no fix is planned
       See recommendations from section "Workarounds and Mitigations"

* SIMATIC CP1626
  - Affected versions:
       All versions
  - Remediation:
       Currently no fix is planned
       See recommendations from section "Workarounds and Mitigations"

* SIMATIC IE/PB-LINK V3
  - Affected versions:
       All versions
  - Remediation:
       Currently no fix is planned
       See recommendations from section "Workarounds and Mitigations"

* SIMATIC MV540 H (6GF3540-0GE10)
  - Affected versions:
       All versions < V3.0
  - Remediation:
       Update to V3.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109795469/

* SIMATIC MV540 S (6GF3540-0CD10)
  - Affected versions:
       All versions < V3.0
  - Remediation:
       Update to V3.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109795469/

* SIMATIC MV550 H (6GF3550-0GE10)
  - Affected versions:
       All versions < V3.0
  - Remediation:
       Update to V3.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109795469/

* SIMATIC MV550 S (6GF3550-0CD10)
  - Affected versions:
       All versions < V3.0
  - Remediation:
       Update to V3.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109795469/

* SIMATIC MV560 U (6GF3560-0LE10)
  - Affected versions:
       All versions < V3.0
  - Remediation:
       Update to V3.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109795469/

* SIMATIC MV560 X (6GF3560-0HE10)
  - Affected versions:
       All versions < V3.0
  - Remediation:
       Update to V3.0 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109795469/

* SIMATIC NET DK-16xx PN IO
  - Affected versions:
       All Versions >= V2.7
  - Remediation:
       Currently no fix is planned
       See recommendations from section "Workarounds and Mitigations"

* SIMATIC Power Line Booster PLB, Base Module (6ES7972-5AA10-0AB0)
  - Affected versions:
       All versions
  - Remediation:
       Currently no fix is planned
       See recommendations from section "Workarounds and Mitigations"

* SIMATIC PROFINET Driver
  - Affected versions:
       All versions < V2.3
  - Remediation:
       Update to V2.3 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/de/en/view/109802422/

* SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
  - Affected versions:
       All Versions < V4.5
  - Remediation:
       Update to V4.5 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109793280/

* SIMOCODE proV Ethernet/IP
  - Affected versions:
       All versions < V1.1.3
  - Remediation:
       Update to V1.1.3 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109756912/

* SIMOCODE proV PROFINET
  - Affected versions:
       All versions < V2.1.3
  - Remediation:
       Update to V2.1.3 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109749989/

* SIPLUS NET SCALANCE X308-2 (6AG1308-2FL10-4AA3)
  - Affected versions:
       All versions < V4.1.4
  - Remediation:
       Update to V4.1.4 or later version
       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       https://support.industry.siemens.com/cs/ww/en/view/109808359/

* SOFTNET-IE PNIO
  - Affected versions:
       All versions
  - Remediation:
       Currently no fix is planned
       See recommendations from section "Workarounds and Mitigations"


WORKAROUNDS AND MITIGATIONS
===========================

Siemens has identified the following specific workarounds and mitigations that
customers can apply to reduce the risk:

* Block incoming Profinet Discovery and Configuration Protocol (DCP)
packets (Ethertype 0x8892, Frame-ID: 0xfefe) from untrusted networks

* Disable Profinet in products, where Profinet is optional and not used in
your environment


Product specific remediations or mitigations can be found in the section
"Affected Products and Solution".

Please follow the "General Security Recommendations".


GENERAL SECURITY RECOMMENDATIONS
================================

As a general security measure, Siemens strongly recommends to protect
network access to devices with appropriate mechanisms. In order to
operate the devices in a protected IT environment, Siemens recommends to
configure the environment according to Siemens' operational guidelines
for Industrial Security (Download:
https://www.siemens.com/cert/operational-guidelines-industrial-security),
and to follow the recommendations in the product manuals.

Additional information on Industrial Security by Siemens can be found
at: https://www.siemens.com/industrialsecurity

PRODUCT DESCRIPTION
===================

Development/Evaluation Kits for PROFINET IO are used to develop compact
or modular PROFINET field devices.

IE/PB-Link devices enable existing PROFIBUS devices to be integrated
into a PROFINET application.

PROFINET Driver is a development kit used to develop PROFINET IO
controllers.

RUGGEDCOM RM1224 is a 4G ROUTER for wireless IP-communication from
Ethernet based devices via LTE(4G)- mobile radio.

SCALANCE W products are wireless communication devices used to connect
industrial components, like Programmable Logic Controllers (PLCs) or
Human Machine Interfaces (HMIs), according to the IEEE 802.11 standard
(802.11ac, 802.11a/b/g/h, and/or 802.11n).

SCALANCE W-700 products are wireless communication devices based on IEEE
802.11 standards. They are used to connect all to sorts of WLAN devices
(Access Points or Clients, depending on the operating mode) with a
strong focus on industrial components, like Programmable Logic
Controllers (PLCs) or Human Machine Interfaces (HMIs) and others.

SCALANCE W-1700 products are wireless communication devices based on
IEEE 802.11 standards. They are used to connect all to sorts of WLAN
devices (Access Points or Clients, depending on the operating mode) with
a strong focus on industrial components, like Programmable Logic
Controllers (PLCs) or Human Machine Interfaces (HMIs) and others.

SCALANCE X switches are used to connect industrial components like
Programmable Logic Controllers (PLCs) or Human Machine Interfaces
(HMIs).

Siemens SIMATIC S7-300 CPU families, S7-400 CPU families, S7-1200 CPU
families, and S7-1500 CPU families have been designed for discrete and
continuous control in industrial environments such as manufacturing,
food and beverages, and chemical industries worldwide.

SIMATIC Compact Field Unit (SIMATIC CFU) is a smart field distributor
for use as an I/O device on PROFINET of an automation system.

SIMATIC CP 1616 and CP 1604 are PCI/PCI-104 cards for high-performance
connection of field devices to Industrial Ethernet with PROFINET.

SIMATIC CP 1623, CP 1626 and CP 1628 are PCI express cards for
connection to Industrial Ethernet.

SIMATIC CP 1626 are PCI express cards for connecting field devices to
Industrial Ethernet with PROFINET.

SIMOCODE is the flexible and modular motor management system for
low-voltage motors.

SINUMERIK CNC offers automation solutions for the shop floor, job shops
and large serial production environments.

SIPLUS extreme products are designed for reliable operation under
extreme conditions and are based on SIMATIC, LOGO!, SITOP, SINAMICS,
SIMOTION, SCALANCE or other devices. SIPLUS devices use the same
firmware as the product they are based on.

The Development Kit DK-16xx PN IO permits an easy integration of CP 1616
and CP 1604 in non-Windows operating system environments.

The SCALANCE M-800, MUM-800 and S615 as well as the RUGGEDCOM RM1224
industrial routers are used for secure remote access to plants via
mobile networks, e.g. GPRS or UMTS with the integrated security
functions of a firewall for protection against unauthorized access and
VPN to protect data transmission.

The SIMATIC CM 1542-1 communication module is used to connect S7-1500
controllers to PROFINET as IO-Controller.

The SIMATIC Power Line Booster system is a communication system for data
transmission on
 conductive media.

The SINAMICS converter family is used to control a wide variety of
drives, especially in mechanical engineering and plant construction.

The SIPLUS HCS 4x00 heating control system is used to control and switch
heaters in industry
 control und operation e.g. quartz, ceramic, flash,
halogen or infrared heaters.

The SOFTNET product family includes several software applications for
connecting programming devices to Industrial Ethernet and PROFIBUS.

The stationary optical readers of the SIMATIC MV500 family are used to
reliably capture printed, lasered, drilled, punched and dotpeen codes on
a variety of different surfaces.

VULNERABILITY CLASSIFICATION
============================

The vulnerability classification has been performed by using the CVSS scoring
system in version 3.1 (CVSS v3.1) (https://www.first.org/cvss/). The CVSS
environmental score is specific to the customer's environment and will impact
the overall CVSS score. The environmental score should therefore be
individually defined by the customer to accomplish final scoring.

An additional classification has been performed using the CWE classification, a
community-developed list of common software security weaknesses. This serves as
a common language and as a baseline for weakness identification, mitigation,
and prevention efforts. A detailed list of CWE classes can be found at:
https://cwe.mitre.org/.



* Vulnerability CVE-2020-28400

  Affected devices contain a vulnerability that allows an unauthenticated
  attacker to trigger a denial-of-service condition. The vulnerability can
  be triggered if a large amount of DCP reset packets are sent to the
  device.

  CVSS v3.1 Base Score: 7.5
  CVSS Vector:          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
  CWE:                  CWE-770: Allocation of Resources Without Limits or Throttling




ADDITIONAL INFORMATION
======================
This vulnerability has been discovered internally by Siemens.

For further inquiries on security vulnerabilities in Siemens products and
solutions, please contact the Siemens ProductCERT:

https://www.siemens.com/cert/advisories


HISTORY DATA
============

V1.0 (2021-07-13): Publication Date
V1.1 (2021-08-10): Added solution for SCALANCE XR-300WG, SCALANCE XB-200, SCALANCE XP-200,
SCALANCE XC-200, SCALANCE XF-200 and EK-ERTEC 200P
V1.2 (2021-09-14): Added solution for SCALANCE X-200 switch family and SIMATIC NET CM
1542-1
V1.3 (2021-10-12): Added solution for SIMATIC PROFINET Driver
V1.4 (2022-02-08): Clarified that no remediation is planned for SCALANCE W700 and SCALANCE
W1700, SIMATIC CP 1604, SIMATIC CP 1616, and SIMATIC CP 1626
V1.5 (2022-04-12): Added solution for SCALANCE X-300 switch family (incl. X408 and SIPLUS
NET variants) and SCALANCE W-1700 (11ac) family

TERMS OF USE
============

Siemens Security Advisories are subject to the terms and conditions contained
in Siemens' underlying license terms or other applicable agreements previously
agreed to with Siemens (hereinafter "License Terms"). To the extent applicable
to information, software or documentation made available in or through a
Siemens Security Advisory, the Terms of Use of Siemens' Global Website
(https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in
particular Sections 8-10 of the Terms of Use, shall apply additionally. In case
of conflicts, the License Terms shall prevail over the Terms of Use.

Copyright: Siemens 2022
-----BEGIN PGP SIGNATURE-----
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=M0MS
-----END PGP SIGNATURE-----