← Back to home

ICSA-21-194-12 · Published 2022-05-12 · View on CISA ICS-CERT ↗

Siemens VxWorks-based Industrial Products (Update C)

CVSS 5.9 MEDIUM

Risk Summary

Successful exploitation of this vulnerability could allow an attacker to cause a heap-based buffer overflow.

CVEs (1)

CVE-2021-29998

Remediations

Siemens recommends that the affected product versions listed as All versions prior to v4.1.4 to Update to v4.1.4 or later.
For SINAMICS PERFECT HARMONY GH180 Drives:
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens Operational Guidelines for Industrial Security, and to follow the recommendations in the product manuals.
Additional information on industrial security by Siemens can be found at: https://www.siemens.com/industrialsecurity.
For more information about this vulnerability and the associated remediations, please see Siemens publication number SSA-560465.

Affected Vendors

Siemens

Affected Products (110)

Siemens · SCALANCE X208PRO (6GK5208-0HA10-2AA6) vers:all/*

Siemens · SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6) vers:all/*

Siemens · SCALANCE X308-2M (6GK5308-2GG00-2AA2) vers:all/*

Siemens · SCALANCE X302-7 EEC (230V) (6GK5302- 7GD00-3EA3) vers:all/*

Siemens · SCALANCE XF208 (6GK5208-0BA00-2AF2) vers:all/*

Siemens · SCALANCE X204-2LD (6GK5204-2BC10-2AA3) vers:all/*

Siemens · SCALANCE X307-3LD (6GK5307-3BM00-2AA3) vers:all/*

Siemens · SCALANCE XF204-2 (6GK5204-2BC00-2AF2) vers:all/*

Siemens · SCALANCE X202-2IRT (6GK5202-2BB00-2BA3) vers:all/*

Siemens · SCALANCE XR324-4M PoE (230V ports on front) (6GK5324-4QG00-3AR2) vers:all/*

Siemens · SINAMICS PERFECT HARMONY GH180 Drives 2015 and 2021 (Drives manufactured in 2022 are not affected)

Siemens · SCALANCE XR324-4M EEC (24V ports on front) (6GK5324-4GG00-1ER2) vers:all/*

Siemens · SCALANCE XR324-4M PoE (24V ports on rear) (6GK5324-4QG00-1HR2) vers:all/*

Siemens · SCALANCE XR324-4M EEC (100-240VAC/60-250VDC ports on front) (6GK5324-4GG10-3ER2) vers:all/*

Siemens · SCALANCE X308-2LD (6GK5308-2FM10-2AA3) vers:all/*

Siemens · SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC ports on front) (6GK5324-4GG00-4ER2) vers:all/*

Siemens · SCALANCE X308-2M (6GK5308-2GG10-2AA2) vers:all/*

Siemens · SCALANCE X216 (6GK5216-0BA00-2AA3) vers:all/*

Siemens · SCALANCE XR324-12M (230V ports on front) (6GK5324-0GG00-3AR2) vers:all/*

Siemens · SCALANCE X307-2 EEC (230V) (6GK5307-2FD00-3EA3) vers:all/*

Siemens · SCALANCE X302-7 EEC (24V coated) (6GK5302-7GD00-1GA3) vers:all/*

Siemens · SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC ports on rear) (6GK5324-4GG10-4JR2) vers:all/*

Siemens · SCALANCE XR324-12M (24V ports on rear) (6GK5324-0GG00-1HR2) vers:all/*

Siemens · SCALANCE X308-2LH (6GK5308-2FN00-2AA3) vers:all/*

Siemens · SCALANCE X308-2 (6GK5308-2FL10-2AA3) vers:all/*

Siemens · SCALANCE X307-2 EEC (2x 230V coated) (6GK5307-2FD00-4GA3) vers:all/*

Siemens · SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3) vers:all/*

Siemens · SCALANCE XR324-4M PoE TS (24V ports on front) (6GK5324-4QG00-1CR2) vers:all/*

Siemens · SCALANCE X302-7 EEC (230V coated) (6GK5302-7GD00-3GA3) vers:all/*

Siemens · SCALANCE X308-2LD (6GK5308-2FM00-2AA3) vers:all/*

Siemens · SCALANCE X212-2LD (6GK5212-2BC00-2AA3) vers:all/*

Siemens · SCALANCE X204-2FM (6GK5204-2BB11-2AA3) vers:all/*

Siemens · SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2) vers:all/*

Siemens · SCALANCE XR324-12M TS (24V) (6GK5324-0GG00-1CR2) vers:all/*

Siemens · SCALANCE X308-2M TS (6GK5308-2GG10-2CA2) vers:all/*

Siemens · SCALANCE X307-2 EEC (24V coated) (6GK5307-2FD00-1GA3) vers:all/*

Siemens · SCALANCE X307-2 EEC (2x 24V coated) (6GK5307-2FD00-2GA3) vers:all/*

Siemens · SCALANCE XR324-4M EEC (2x 24V ports on rear) (6GK5324-4GG10-2JR2) vers:all/*

Siemens · SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6) vers:all/*

Siemens · SCALANCE XF201-3P IRT (6GK5201-3JR00-2BA6) vers:all/*

Siemens · SCALANCE X212-2 (6GK5212-2BB00-2AA3) vers:all/*

Siemens · SCALANCE XR324-4M EEC (2x 24V ports on rear) (6GK5324-4GG00-2JR2) vers:all/*

Siemens · SCALANCE X308-2 (6GK5308-2FL00-2AA3) vers:all/*

Siemens · SCALANCE X307-3 (6GK5307-3BL10-2AA3) vers:all/*

Siemens · SCALANCE X302-7 EEC (2x 24V coated) (6GK5302-7GD00-2GA3) vers:all/*

Siemens · SCALANCE X206-1 (6GK5206-1BB10-2AA3) vers:all/*

Siemens · SCALANCE X204IRT (6GK5204-0BA00-2BA3) vers:all/*

Siemens · SCALANCE XR324-4M EEC (100-240VAC/60-250VDC ports on rear) (6GK5324-4GG00-3JR2) vers:all/*

Siemens · SCALANCE X306-1LD FE (6GK5306-1BF00-2AA3) vers:all/*

Siemens · SIMATIC RF180C (6GT2002-0JD00) vers:all/*

Siemens · SCALANCE X310FE (6GK5310-0BA10-2AA3) vers:all/*

Siemens · SCALANCE X310FE (6GK5310-0BA00-2AA3) vers:all/*

Siemens · SCALANCE XR324-4M EEC (2x 24V ports on front) (6GK5324-4GG10-2ER2) vers:all/*

Siemens · SCALANCE X310 (6GK5310-0FA00-2AA3) vers:all/*

Siemens · SCALANCE XF204 (6GK5204-0BA00-2AF2) vers:all/*

Siemens · SCALANCE X308-2M PoE (6GK5308-2QG10-2AA2) vers:all/*

Siemens · SCALANCE X320-1 FE (6GK5320-1BD00-2AA3) vers:all/*

Siemens · SCALANCE X204-2 (6GK5204-2BB10-2AA3) vers:all/*

Siemens · SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC ports on rear) (6GK5324-4GG00-4JR2) vers:all/*

Siemens · SCALANCE X308-2LH+ (6GK5308-2FP10-2AA3) vers:all/*

Siemens · SCALANCE XR324-4M EEC (100-240VAC/60-250VDC ports on front) (6GK5324-4GG00-3ER2) vers:all/*

Siemens · SCALANCE XR324-4M EEC (100-240VAC/60-250VDC ports on rear) (6GK5324-4GG10-3JR2) vers:all/*

Siemens · SIPLUS NET SCALANCE X308-2 (6AG1308-2FL10-4AA3) vers:all/*

Siemens · SCALANCE X302-7 EEC (2x 230V) (6GK5302-7GD00-4EA3) vers:all/*

Siemens · SCALANCE XR324-4M PoE (24V ports on front) (6GK5324-4QG00-1AR2) vers:all/*

Siemens · SCALANCE X307-2 EEC (230V coated) (6GK5307-2FD00-3GA3) vers:all/*

Siemens · SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3) vers:all/*

Siemens · SCALANCE X208 (6GK5208-0BA10-2AA3) vers:all/*

Siemens · SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC ports on front) (6GK5324-4GG10-4ER2) vers:all/*

Siemens · SCALANCE XR324-4M EEC (24V ports on front) (6GK5324-4GG10-1ER2) vers:all/*

Siemens · SCALANCE X302-7 EEC (24V) (6GK5302-7GD00-1EA3) vers:all/*

Siemens · SIMATIC RFID 181EIP (6GT2002-0JD20) vers:all/*

Siemens · SCALANCE XF204IRT (6GK5204-0BA00-2BF2) vers:all/*

Siemens · SIMATIC RF182C (6GT2002-0JD10) vers:all/*

Siemens · SCALANCE XR324-12M (230V ports on rear) (6GK5324-0GG00-3HR2) vers:all/*

Siemens · SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2) vers:all/*

Siemens · SCALANCE X224 (6GK5224-0BA00-2AA3) vers:all/*

Siemens · SCALANCE X307-2 EEC (2x 24V) (6GK5307-2FD00-2EA3) vers:all/*

Siemens · SCALANCE X307-2 EEC (2x 230V) (6GK5307-2FD00-4EA3) vers:all/*

Siemens · SCALANCE XR324-12M (230V ports on rear) (6GK5324-0GG10-3HR2) vers:all/*

Siemens · SCALANCE XR324-12M (24V ports on front) (6GK5324-0GG00-1AR2) vers:all/*

Siemens · SCALANCE X408-2 (6GK5408-2FD00-2AA2) vers:all/*

Siemens · SCALANCE XR324-4M EEC (24V ports on rear) (6GK5324-4GG00-1JR2) vers:all/*

Siemens · SCALANCE X302-7 EEC (2x 24V) (6GK5302-7GD00-2EA3) vers:all/*

Siemens · SCALANCE X307-3LD (6GK5307-3BM10-2AA3) vers:all/*

Siemens · SCALANCE XR324-12M TS (24V) (6GK5324-0GG10-1CR2) vers:all/*

Siemens · SCALANCE X308-2M PoE (6GK5308-2QG00-2AA2) vers:all/*

Siemens · SCALANCE X307-3 (6GK5307-3BL00-2AA3) vers:all/*

Siemens · SCALANCE XR324-4M PoE (230V ports on rear) (6GK5324-4QG00-3HR2) vers:all/*

Siemens · RUGGEDCOM WIN5200 series subscriber unit vers:all/*

Siemens · SCALANCE X307-2 EEC (24V) (6GK5307-2FD00-1EA3) vers:all/*

Siemens · SCALANCE XF206-1 (6GK5206-1BC00-2AF2) vers:all/*

Siemens · SCALANCE X204-2TS (6GK5204-2BB10-2CA2) vers:all/*

Siemens · SCALANCE X308-2M TS (6GK5308-2GG00-2CA2) vers:all/*

Siemens · SCALANCE X308-2LH+ (6GK5308-2FP00-2AA3) vers:all/*

Siemens · RUGGEDCOM WIN5100 series subscriber unit vers:all/*

Siemens · SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2) vers:all/*

Siemens · SCALANCE XR324-12M (24V ports on front) (6GK5324-0GG10-1AR2) vers:all/*

Siemens · SCALANCE X302-7 EEC (2x 230V coated) (6GK5302-7GD00-4GA3) vers:all/*

Siemens · SCALANCE X320-1-2LD FE (6GK5320-3BF00-2AA3) vers:all/*

Siemens · SCALANCE X304-2FE (6GK5304-2BD00-2AA3) vers:all/*

Siemens · SCALANCE XR324-4M EEC (24V ports on rear) (6GK5324-4GG10-1JR2) vers:all/*

Siemens · SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3) vers:all/*

Siemens · SCALANCE X310 (6GK5310-0FA10-2AA3) vers:all/*

Siemens · SCALANCE XR324-12M (24V ports on rear) (6GK5324-0GG10-1HR2) vers:all/*

Siemens · SCALANCE XR324-12M (230V ports on front) (6GK5324-0GG10-3AR2) vers:all/*

Siemens · SCALANCE X201-3P IRT PRO (6GK5201-3BH00-2BD2) vers:all/*

Siemens · SCALANCE X308-2LH (6GK5308-2FN10-2AA3) vers:all/*

Siemens · SCALANCE X206-1LD (6GK5206-1BC10-2AA3) vers:all/*

Siemens · SCALANCE XR324-4M EEC (2x 24V ports on front) (6GK5324-4GG00-2ER2) vers:all/*

Affected Sectors

Multiple

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more