CVE-2021-44693

MEDIUM

SIMATIC S7-1200 CPU and S7-PLCSIM Advanced Firmware - Denial of Service via Crafted Packets to Port 102/tcp

Title source: llm

Description

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

References (1)

Core 1

Core References

Patch, Vendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf

Scores

CVSS v3 4.9

EPSS 0.0072

EPSS Percentile 48.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-1284

Status published

Products (50)

siemens/simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware

siemens/simatic_s7-1200_cpu_1211c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1212c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1212fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1214_fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1214c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1214fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1215_fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1215c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1215fc_firmware < 4.6.0

... and 40 more

Published Dec 13, 2022

Tracked Since Feb 18, 2026