CVE-2018-13815
Description
A vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All Versions < V2.6). An attacker could exhaust the available connection pool of an affected device by opening a sufficient number of connections to the device. Successful exploitation requires an attacker to be able to send packets to port 102/tcp of the affected device. No user interaction and no user privileges are required to exploit the vulnerability. The vulnerability, if exploited, could cause a Denial-of-Service condition impacting the availability of the system. At the time of advisory publication no public exploitation of this vulnerability was known.
How to fix
- siemens simatic_s7-1500_firmware2.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens simatic_s7-1200_firmware | No range specified | — |
| siemens simatic_s7-1500_firmware | v < 2.6 | 2.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.