SSA-280603 V1.1 (Last Update: 2024-09-10): Denial of Service Vulnerability in SINUMERIK ONE and SINUMERIK MC

Risk Summary

<p>A vulnerability has been identified in the integrated S7-1500 CPU of SINUMERIK ONE and SINUMERIK MC products that could allow an attacker to cause a denial of service condition. In order to exploit the vulnerability, an attacker must have access to the affected devices on port 102/tcp.</p> <p>Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available.</p> <p>Note: The affected integrated S7-1500 CPUs and related products are advised in [1].</p> <p>[1] <a href="https://cert-portal.siemens.com/productcert/html/ssa-592380.html">https://cert-portal.siemens.com/productcert/html/ssa-592380.html</a></p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)