CVEvulnerability
CVE-2021-37204
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-02-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-672
Description
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 Ready4Linux (All versions), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 < V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 < V2.9.4), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-1500 Software Controller (All versions >= V21.9 < V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packet over port 102/tcp. A restart of the affected device is needed to restore normal operations.
Affected configurations
• siemens simatic drive controller cpu 1504d tf firmware (< 2.9.4)
• siemens simatic drive controller cpu 1507d tf firmware (< 2.9.4)
• siemens simatic et 200sp open controller cpu 1515sp pc2 firmware
• siemens simatic s7-plcsim advanced firmware (< 4.0)
• siemens simatic s7-plcsim advanced firmware 4.0
• siemens tim 1531 irc firmware (>= 2.2)
• siemens simatic s7-1500 software controller
• siemens simatic s7-1200 cpu 1211c firmware (>= 4.5.0 < 4.5.2)
• siemens simatic s7-1200 cpu 1212c firmware (>= 4.5.0 < 4.5.2)
• siemens simatic s7-1200 cpu 1212fc firmware (>= 4.5.0 < 4.5.2)
• siemens simatic s7-1200 cpu 1214fc firmware (>= 4.5.0 < 4.5.2)
• siemens simatic s7-1200 cpu 1214c firmware (>= 4.5.0 < 4.5.2)
• siemens simatic s7-1200 cpu 1215fc firmware (>= 4.5.0 < 4.5.2)
• siemens simatic s7-1200 cpu 1215c firmware (>= 4.5.0 < 4.5.2)
• siemens simatic s7-1200 cpu 1217c firmware (>= 4.5.0 < 4.5.2)
• siemens simatic s7-1500 cpu 1510sp-1 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1510sp firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1511-1 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1511c-1 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1511f-1 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1511t-1 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1511tf-1 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1512c-1 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1512sp-1 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1512spf-1 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1513-1 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1513f-1 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1513r-1 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu cpu 1513prof-2 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu cpu 1513pro-2 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1515-2 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1515f-2 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1515r-2 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1515t-2 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1515tf-2 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1516pro f firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1516pro-2 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1516-3 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1516f-3 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1516t-3 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1516tf-3 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1517-3 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1517f-3 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1517tf-3 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1518-4 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1518f-4 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1518hf-4 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1518t-4 firmware (>= 2.9.2 < 2.9.4)
• siemens simatic s7-1500 cpu 1518tf-4 firmware (>= 2.9.2 < 2.9.4)
Related
Weakness · CWE (1)
- CWE-672 Operation on a Resource after Expiration or Release weakness
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-838121.pdf Patch, Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-838121.pdf Patch, Vendor Advisory