SSA-617264 (Last Update: 2020-04-13): Multiple Security Vulnerabilities in SIMATIC S7-400 V5 PN CPUs

Risk Summary

<p>When receiving malformed network data, SIMATIC S7-400 V5 PN CPUs may go into defect mode. This would allow attackers to perform a Denial-of-Service attack on the CPUs.</p> <p>Siemens will not publish a fix for this vulnerability as this product version is discontinued since October 2011 [1]. Version V6 is not affected by these specific problems. [1] <a href="https://support.industry.siemens.com/cs/ww/en/view/50252551" class="uri">https://support.industry.siemens.com/cs/ww/en/view/50252551</a></p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)