← Back to home
ICSA-20-042-04  ·  Published 2024-07-09  ·  View on CISA ICS-CERT ↗

Siemens PROFINET-IO Stack (Update H)

CVSS 7.5 HIGH

CVEs (1)

Remediations

  • Disable PROFINET in products, where PROFINET is optional and not used in your environment
  • Block incoming DCE-RPC packets (port 34964/udp) from untrusted networks
  • Create a firewall rule that blocks the PROFINET Context Manager port (34964/udp)
  • Migrate to a successor product within the SIMATIC RF18xC/CI family, V1.3 ( https://support.industry.siemens.com/cs/ww/en/view/109781665) or later version; for details refer to the phase-out announcement (https://support.industry.siemens.com/cs/ww/en/view/109783832)
  • Currently no fix is planned
  • Update to V3.3 or later version
  • Update to V4.1.0 or later version
  • Update to V4.2.0 or later version
  • Update to V7.0.6 or later version
  • Update to V1.3
  • Update to V4.5 Patch 01
  • Update to V4.6
  • Update to V6.1.2 or later version
  • Update to V6.4
  • Update to V5.4.2
  • Update to V5.2.5 or later version
  • Update to V4.1.4 or later version
  • Update to V6.2.3
  • Update to V4.1
  • Update to V3.2.1
  • Update to V2.8.1
  • Update to V2.1 Patch 03
  • Update to V4.5 or later version
  • Update to V4.5 or later version Please contact your Siemens representative for information on how to obtain the update.

Affected Vendors

Siemens

Affected Products (198)

Siemens · Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller vers:all/*
Siemens · Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 <V4.5
Siemens · Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P <V4.6
Siemens · PROFINET Driver for Controller <V2.1
Siemens · RUGGEDCOM RM1224 family (6GK6108-4AM00) <V4.3
Siemens · SCALANCE M804PB (6GK5804-0AP00-2AA2) <V4.3
Siemens · SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) <V4.3
Siemens · SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) <V4.3
Siemens · SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) <V4.3
Siemens · SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) <V4.3
Siemens · SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) <V4.3
Siemens · SCALANCE M874-2 (6GK5874-2AA00-2AA2) <V4.3
Siemens · SCALANCE M874-3 (6GK5874-3AA00-2AA2) <V4.3
Siemens · SCALANCE M876-3 (6GK5876-3AA02-2BA2) <V4.3
Siemens · SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) <V4.3
Siemens · SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) <V4.3
Siemens · SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) <V4.3
Siemens · SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) <V4.3
Siemens · SCALANCE W-700 IEEE 802.11n family <=V6.0.1
Siemens · SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3) <V5.3
Siemens · SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3) <V5.3
Siemens · SCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6) <V5.3
Siemens · SCALANCE X202-2IRT (6GK5202-2BB00-2BA3) <V5.3
Siemens · SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3) <V5.3
Siemens · SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6) <V5.3
Siemens · SCALANCE X204-2 (6GK5204-2BB10-2AA3) <V5.2.5
Siemens · SCALANCE X204-2FM (6GK5204-2BB11-2AA3) <V5.2.5
Siemens · SCALANCE X204-2LD (6GK5204-2BC10-2AA3) <V5.2.5
Siemens · SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2) <V5.2.5
Siemens · SCALANCE X204-2TS (6GK5204-2BB10-2CA2) <V5.2.5
Siemens · SCALANCE X204IRT (6GK5204-0BA00-2BA3) <V5.3
Siemens · SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6) <V5.3
Siemens · SCALANCE X206-1 (6GK5206-1BB10-2AA3) <V5.2.5
Siemens · SCALANCE X206-1LD (6GK5206-1BC10-2AA3) <V5.2.5
Siemens · SCALANCE X208 (6GK5208-0BA10-2AA3) <V5.2.5
Siemens · SCALANCE X208PRO (6GK5208-0HA10-2AA6) <V5.2.5
Siemens · SCALANCE X212-2 (6GK5212-2BB00-2AA3) <V5.2.5
Siemens · SCALANCE X212-2LD (6GK5212-2BC00-2AA3) <V5.2.5
Siemens · SCALANCE X216 (6GK5216-0BA00-2AA3) <V5.2.5
Siemens · SCALANCE X224 (6GK5224-0BA00-2AA3) <V5.2.5
Siemens · SCALANCE X302-7 EEC (2x 24V) (6GK5302-7GD00-2EA3) <V4.1.4
Siemens · SCALANCE X302-7 EEC (2x 24V, coated) (6GK5302-7GD00-2GA3) <V4.1.4
Siemens · SCALANCE X302-7 EEC (2x 230V) (6GK5302-7GD00-4EA3) <V4.1.4
Siemens · SCALANCE X302-7 EEC (2x 230V, coated) (6GK5302-7GD00-4GA3) <V4.1.4
Siemens · SCALANCE X302-7 EEC (24V) (6GK5302-7GD00-1EA3) <V4.1.4
Siemens · SCALANCE X302-7 EEC (24V, coated) (6GK5302-7GD00-1GA3) <V4.1.4
Siemens · SCALANCE X302-7 EEC (230V) (6GK5302-7GD00-3EA3) <V4.1.4
Siemens · SCALANCE X302-7 EEC (230V, coated) (6GK5302-7GD00-3GA3) <V4.1.4
Siemens · SCALANCE X304-2FE (6GK5304-2BD00-2AA3) <V4.1.4
Siemens · SCALANCE X306-1LD FE (6GK5306-1BF00-2AA3) <V4.1.4
Siemens · SCALANCE X307-2 EEC (2x 24V) (6GK5307-2FD00-2EA3) <V4.1.4
Siemens · SCALANCE X307-2 EEC (2x 24V, coated) (6GK5307-2FD00-2GA3) <V4.1.4
Siemens · SCALANCE X307-2 EEC (2x 230V) (6GK5307-2FD00-4EA3) <V4.1.4
Siemens · SCALANCE X307-2 EEC (2x 230V, coated) (6GK5307-2FD00-4GA3) <V4.1.4
Siemens · SCALANCE X307-2 EEC (24V) (6GK5307-2FD00-1EA3) <V4.1.4
Siemens · SCALANCE X307-2 EEC (24V, coated) (6GK5307-2FD00-1GA3) <V4.1.4
Siemens · SCALANCE X307-2 EEC (230V) (6GK5307-2FD00-3EA3) <V4.1.4
Siemens · SCALANCE X307-2 EEC (230V, coated) (6GK5307-2FD00-3GA3) <V4.1.4
Siemens · SCALANCE X307-3 (6GK5307-3BL00-2AA3) <V4.1.4
Siemens · SCALANCE X307-3 (6GK5307-3BL10-2AA3) <V4.1.4
Siemens · SCALANCE X307-3LD (6GK5307-3BM00-2AA3) <V4.1.4
Siemens · SCALANCE X307-3LD (6GK5307-3BM10-2AA3) <V4.1.4
Siemens · SCALANCE X308-2 (6GK5308-2FL00-2AA3) <V4.1.4
Siemens · SCALANCE X308-2 (6GK5308-2FL10-2AA3) <V4.1.4
Siemens · SCALANCE X308-2LD (6GK5308-2FM00-2AA3) <V4.1.4
Siemens · SCALANCE X308-2LD (6GK5308-2FM10-2AA3) <V4.1.4
Siemens · SCALANCE X308-2LH (6GK5308-2FN00-2AA3) <V4.1.4
Siemens · SCALANCE X308-2LH (6GK5308-2FN10-2AA3) <V4.1.4
Siemens · SCALANCE X308-2LH+ (6GK5308-2FP00-2AA3) <V4.1.4
Siemens · SCALANCE X308-2LH+ (6GK5308-2FP10-2AA3) <V4.1.4
Siemens · SCALANCE X308-2M (6GK5308-2GG00-2AA2) <V4.1.4
Siemens · SCALANCE X308-2M (6GK5308-2GG10-2AA2) <V4.1.4
Siemens · SCALANCE X308-2M PoE (6GK5308-2QG00-2AA2) <V4.1.4
Siemens · SCALANCE X308-2M PoE (6GK5308-2QG10-2AA2) <V4.1.4
Siemens · SCALANCE X308-2M TS (6GK5308-2GG00-2CA2) <V4.1.4
Siemens · SCALANCE X308-2M TS (6GK5308-2GG10-2CA2) <V4.1.4
Siemens · SCALANCE X310 (6GK5310-0FA00-2AA3) <V4.1.4
Siemens · SCALANCE X310 (6GK5310-0FA10-2AA3) <V4.1.4
Siemens · SCALANCE X310FE (6GK5310-0BA00-2AA3) <V4.1.4
Siemens · SCALANCE X310FE (6GK5310-0BA10-2AA3) <V4.1.4
Siemens · SCALANCE X320-1 FE (6GK5320-1BD00-2AA3) <V4.1.4
Siemens · SCALANCE X320-1-2LD FE (6GK5320-3BF00-2AA3) <V4.1.4
Siemens · SCALANCE X408-2 (6GK5408-2FD00-2AA2) <V4.1.4
Siemens · SCALANCE XB-200 family <V3.0
Siemens · SCALANCE XC-200 <V3.0
Siemens · SCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2) <V5.3
Siemens · SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2) <V5.3
Siemens · SCALANCE XF204 (6GK5204-0BA00-2AF2) <V5.2.5
Siemens · SCALANCE XF204-2 (6GK5204-2BC00-2AF2) <V5.2.5
Siemens · SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2) <V5.3
Siemens · SCALANCE XF204IRT (6GK5204-0BA00-2BF2) <V5.3
Siemens · SCALANCE XF206-1 (6GK5206-1BC00-2AF2) <V5.2.5
Siemens · SCALANCE XF208 (6GK5208-0BA00-2AF2) <V5.2.5
Siemens · SCALANCE XF-200BA <V3.0
Siemens · SCALANCE XM-400 family <V6.0
Siemens · SCALANCE XP-200 <V3.0
Siemens · SCALANCE XR324-4M EEC (2x 24V, ports on front) (6GK5324-4GG00-2ER2) <V4.1.4
Siemens · SCALANCE XR324-4M EEC (2x 24V, ports on front) (6GK5324-4GG10-2ER2) <V4.1.4
Siemens · SCALANCE XR324-4M EEC (2x 24V, ports on rear) (6GK5324-4GG00-2JR2) <V4.1.4
Siemens · SCALANCE XR324-4M EEC (2x 24V, ports on rear) (6GK5324-4GG10-2JR2) <V4.1.4
Siemens · SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) (6GK5324-4GG00-4ER2) <V4.1.4
Siemens · SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) (6GK5324-4GG10-4ER2) <V4.1.4
Siemens · SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) (6GK5324-4GG00-4JR2) <V4.1.4
Siemens · SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) (6GK5324-4GG10-4JR2) <V4.1.4
Siemens · SCALANCE XR324-4M EEC (24V, ports on front) (6GK5324-4GG00-1ER2) <V4.1.4
Siemens · SCALANCE XR324-4M EEC (24V, ports on front) (6GK5324-4GG10-1ER2) <V4.1.4
Siemens · SCALANCE XR324-4M EEC (24V, ports on rear) (6GK5324-4GG00-1JR2) <V4.1.4
Siemens · SCALANCE XR324-4M EEC (24V, ports on rear) (6GK5324-4GG10-1JR2) <V4.1.4
Siemens · SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) (6GK5324-4GG00-3ER2) <V4.1.4
Siemens · SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) (6GK5324-4GG10-3ER2) <V4.1.4
Siemens · SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) (6GK5324-4GG00-3JR2) <V4.1.4
Siemens · SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) (6GK5324-4GG10-3JR2) <V4.1.4
Siemens · SCALANCE XR324-4M PoE (24V, ports on front) (6GK5324-4QG00-1AR2) <V4.1.4
Siemens · SCALANCE XR324-4M PoE (24V, ports on rear) (6GK5324-4QG00-1HR2) <V4.1.4
Siemens · SCALANCE XR324-4M PoE (230V, ports on front) (6GK5324-4QG00-3AR2) <V4.1.4
Siemens · SCALANCE XR324-4M PoE (230V, ports on rear) (6GK5324-4QG00-3HR2) <V4.1.4
Siemens · SCALANCE XR324-4M PoE TS (24V, ports on front) (6GK5324-4QG00-1CR2) <V4.1.4
Siemens · SCALANCE XR324-12M (24V, ports on front) (6GK5324-0GG00-1AR2) <V4.1.4
Siemens · SCALANCE XR324-12M (24V, ports on front) (6GK5324-0GG10-1AR2) <V4.1.4
Siemens · SCALANCE XR324-12M (24V, ports on rear) (6GK5324-0GG00-1HR2) <V4.1.4
Siemens · SCALANCE XR324-12M (24V, ports on rear) (6GK5324-0GG10-1HR2) <V4.1.4
Siemens · SCALANCE XR324-12M (230V, ports on front) (6GK5324-0GG00-3AR2) <V4.1.4
Siemens · SCALANCE XR324-12M (230V, ports on front) (6GK5324-0GG10-3AR2) <V4.1.4
Siemens · SCALANCE XR324-12M (230V, ports on rear) (6GK5324-0GG00-3HR2) <V4.1.4
Siemens · SCALANCE XR324-12M (230V, ports on rear) (6GK5324-0GG10-3HR2) <V4.1.4
Siemens · SCALANCE XR324-12M TS (24V) (6GK5324-0GG00-1CR2) <V4.1.4
Siemens · SCALANCE XR324-12M TS (24V) (6GK5324-0GG10-1CR2) <V4.1.4
Siemens · SCALANCE XR-300WG family <V3.0
Siemens · SCALANCE XR-500 family <V6.0
Siemens · SIMATIC CP 343-1 (6GK7343-1EX30-0XE0) vers:all/*
Siemens · SIMATIC CP 343-1 Advanced (6GK7343-1GX31-0XE0) vers:all/*
Siemens · SIMATIC CP 343-1 ERPC (6GK7343-1FX00-0XE0) vers:all/*
Siemens · SIMATIC CP 343-1 Lean (6GK7343-1CX10-0XE0) vers:all/*
Siemens · SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) <V3.3
Siemens · SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) <V3.3
Siemens · SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) <V3.3
Siemens · SIMATIC CP 443-1 OPC UA (6GK7443-1UX00-0XE0) vers:all/*
Siemens · SIMATIC CP 1616 and CP 1604 <V2.8
Siemens · SIMATIC ET200ecoPN, 4AO U/I 4xM12 (6ES7145-6HD00-0AB0) vers:all/*
Siemens · SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 (6ES7147-6BG00-0AB0) vers:all/*
Siemens · SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 (6ES7142-6BR00-0AB0) vers:all/*
Siemens · SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 (6ES7144-6KD50-0AB0) vers:all/*
Siemens · SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 (6ES7144-6KD00-0AB0) vers:all/*
Siemens · SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 (6ES7141-6BF00-0AB0) vers:all/*
Siemens · SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 (6ES7141-6BG00-0AB0) vers:all/*
Siemens · SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 (6ES7142-6BF50-0AB0) vers:all/*
Siemens · SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 (6ES7142-6BF00-0AB0) vers:all/*
Siemens · SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 (6ES7142-6BG00-0AB0) vers:all/*
Siemens · SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 (6ES7141-6BH00-0AB0) vers:all/*
Siemens · SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 (6ES7142-6BH00-0AB0) vers:all/*
Siemens · SIMATIC ET200ecoPN: IO-Link Master (6ES7148-6JA00-0AB0) vers:all/*
Siemens · SIMATIC ET200S (incl. SIPLUS variants) vers:all/*
Siemens · SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) vers:all/*
Siemens · SIMATIC ET 200M IM 153-4 PN IO HF (incl. SIPLUS variants) vers:all/*
Siemens · SIMATIC ET 200M IM 153-4 PN IO ST (incl. SIPLUS variants) vers:all/*
Siemens · SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) <V4.2.0
Siemens · SIMATIC ET 200MP IM 155-5 PN ST (6ES7155-5AA00-0AB0) <V4.1.0
Siemens · SIMATIC ET 200pro IM 154-3 PN HF (6ES7154-3AB00-0AB0) vers:all/*
Siemens · SIMATIC ET 200pro IM 154-4 PN HF (6ES7154-4AB10-0AB0) vers:all/*
Siemens · SIMATIC ET 200SP IM 155-6 PN BA (6ES7155-6AR00-0AN0) vers:all/*
Siemens · SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0) <V4.2.0
Siemens · SIMATIC ET 200SP IM 155-6 PN ST (6ES7155-6AU00-0BN0) <V4.1.0
Siemens · SIMATIC ET 200SP IM 155-6 PN ST BA (6ES7155-6AA00-0BN0) <V4.1.0
Siemens · SIMATIC IPC Support, Package for VxWorks vers:all/*
Siemens · SIMATIC MV420 SR-B (6GF3420-0AA20) <V7.0.6
Siemens · SIMATIC MV420 SR-B Body (6GF3420-0AX20) <V7.0.6
Siemens · SIMATIC MV420 SR-P (6GF3420-0AA40) <V7.0.6
Siemens · SIMATIC MV420 SR-P Body (6GF3420-0AX40) <V7.0.6
Siemens · SIMATIC MV440 HR (6GF3440-1GE10) <V7.0.6
Siemens · SIMATIC MV440 SR (6GF3440-1CD10) <V7.0.6
Siemens · SIMATIC MV440 UR (6GF3440-1LE10) <V7.0.6
Siemens · SIMATIC PN/PN Coupler (incl. SIPLUS NET variants) vers:all/*
Siemens · SIMATIC RF180C (6GT2002-0JD00) vers:all/*
Siemens · SIMATIC RF182C (6GT2002-0JD10) vers:all/*
Siemens · SIMATIC RF600R family <V3
Siemens · SIMOTION C <V4.5
Siemens · SIMOTION D <V4.5
Siemens · SIMOTION P <V4.5
Siemens · SINAMICS DCP <V1.3
Siemens · SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0) <V4.2.0
Siemens · SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-7AC0) <V4.2.0
Siemens · SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0) <V4.2.0
Siemens · SIPLUS ET 200MP IM 155-5 PN ST (6AG1155-5AA00-7AB0) <V4.1.0
Siemens · SIPLUS ET 200MP IM 155-5 PN ST TX RAIL (6AG2155-5AA00-4AB0) <V4.1.0
Siemens · SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-2CN0) <V4.2.0
Siemens · SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-4CN0) <V4.2.0
Siemens · SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU00-1CN0) <V4.2.0
Siemens · SIPLUS ET 200SP IM 155-6 PN ST (6AG1155-6AU00-7BN0) <V4.1.0
Siemens · SIPLUS ET 200SP IM 155-6 PN ST BA (6AG1155-6AA00-7BN0) <V4.1.0
Siemens · SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL (6AG2155-6AA00-4BN0) <V4.1.0
Siemens · SIPLUS ET 200SP IM 155-6 PN ST TX RAIL (6AG2155-6AU00-4BN0) <V4.1.0
Siemens · SIPLUS NET CP 343-1 (6AG1343-1EX30-7XE0) vers:all/*
Siemens · SIPLUS NET CP 343-1 Advanced (6AG1343-1GX31-4XE0) vers:all/*
Siemens · SIPLUS NET CP 343-1 Lean (6AG1343-1CX10-2XE0) vers:all/*
Siemens · SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) <V3.3
Siemens · SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) <V3.3
Siemens · SIPLUS NET SCALANCE X308-2 (6AG1308-2FL10-4AA3) <V4.1.4
Siemens · SOFTNET-IE PNIO vers:all/*

Affected Sectors

Multiple

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more