CVE-2021-40365

HIGH

Siemens SIMATIC S7-1200 and ET 200 SP Open Controller - Denial of Service via Crafted Packets

Title source: llm

Description

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

References (1)

Core 1

Core References

Patch, Vendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf

Scores

CVSS v3 7.5

EPSS 0.0019

EPSS Percentile 39.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-20

Status published

Products (50)

siemens/simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware

siemens/simatic_s7-1200_cpu_1211c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1212c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1212fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1214_fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1214c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1214fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1215_fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1215c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1215fc_firmware < 4.6.0

... and 40 more

Published Dec 13, 2022

Tracked Since Feb 18, 2026