CVE-2021-40365
High
Description
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
SeverityHigh
CVSS7.5
Exploit probability—
ProductSiemens Simatic S7-plcsim Advanced Firmware
PublishedDec 13, 2022
First seenDec 13, 2022
Weakness typeCWE-20Improper input validation
How to fix
Update
- siemens simatic_s7-plcsim_advanced_firmware5.0 or later
- siemens simatic_s7-1200_cpu_1211c_firmware4.6.0 or later
- siemens simatic_s7-1200_cpu_1212c_firmware4.6.0 or later
- siemens simatic_s7-1200_cpu_1212fc_firmware4.6.0 or later
- siemens simatic_s7-1200_cpu_1214_fc_firmware4.6.0 or later
- siemens simatic_s7-1200_cpu_1214c_firmware4.6.0 or later
- siemens simatic_s7-1200_cpu_1214fc_firmware4.6.0 or later
- siemens simatic_s7-1200_cpu_1215_fc_firmware4.6.0 or later
- siemens simatic_s7-1200_cpu_1215c_firmware4.6.0 or later
- siemens simatic_s7-1200_cpu_1215fc_firmware4.6.0 or later
- siemens simatic_s7-1200_cpu_1217c_firmware4.6.0 or later
- siemens simatic_s7-1200_cpu_12_1211c_firmware4.6.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens simatic_s7-plcsim_advanced_firmware | v < 5.0 | 5.0 |
| siemens simatic_s7-1200_cpu_1211c_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_1212c_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_1212fc_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_1214_fc_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_1214c_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_1214fc_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_1215_fc_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_1215c_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_1215fc_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_1217c_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_12_1211c_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_12_1212c_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_12_1212fc_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_12_1214c_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_12_1214fc_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_12_1215c_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_12_1215fc_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1200_cpu_12_1217c_firmware | v < 4.6.0 | 4.6.0 |
| siemens siplus_s7-1200_cp_1243-1_rail_firmware | v < 4.6.0 | 4.6.0 |
| siemens siplus_s7-1200_cp_1243-1_firmware | v < 4.6.0 | 4.6.0 |
| siemens simatic_s7-1500_cpu_1507s_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1507s_f_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1508s_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1508s_f_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1510sp_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1510sp-1_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1511-1_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1511-1_pn_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1511c_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1511c-1_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1511f-1_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1511f-1_pn_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1511t-1_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1511tf-1_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1512c_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1512c-1_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1512sp-1_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1512spf-1_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1513-1_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1513-1_pn_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1513f-1_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1513f-1_pn_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1513r-1_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1515-2_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1515-2_pn_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_151511c-1_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_151511f-1_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1515f-2_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1515f-2_pn_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1515r-2_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1515t-2_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1515tf-2_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1516-3_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1516-3_dp_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1516-3_pn_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1516-3_pn\/dp_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1516f-3_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1516f-3_pn\/dp_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1516pro-2_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1516pro_f_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1516t-3_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1516tf-3_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1517-3_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1517-3_dp_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1517-3_pn_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1517-3_pn\/dp_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1517f-3_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1517f-3_pn\/dp_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1517tf-3_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1518_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1518-4_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1518-4_dp_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1518-4_pn_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1518-4_pn\/dp_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1518f-4_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1518f-4_pn\/dp_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1518hf-4_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1518t-4_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_1518tf-4_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_15pro-2_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_15prof-2_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_cpu_1513pro-2_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_s7-1500_cpu_cpu_1513prof-2_firmware | v < 3.0.1 | 3.0.1 |
| siemens siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware | v < 3.0.1 | 3.0.1 |
| siemens siplus_et_200sp_cp_1543sp-1_isec_firmware | v < 3.0.1 | 3.0.1 |
| siemens siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware | v < 3.0.1 | 3.0.1 |
| siemens simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware | No range specified | — |
| siemens simatic_s7-1500_software_controller_firmware | No range specified | — |
| siemens siplus_s7-300_cpu_314_firmware | No range specified | — |
| siemens siplus_s7-300_cpu_315-2_dp_firmware | No range specified | — |
| siemens siplus_s7-300_cpu_315-2_pn\/dp_firmware | No range specified | — |
| siemens siplus_s7-300_cpu_317-2_pn\/dp_firmware | No range specified | — |
| siemens siplus_tim_1531_irc_firmware | No range specified | — |
| siemens tim_1531_irc_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.