CVE-2021-44695

MEDIUM

Siemens Simatic S7-plcsim Advanced Firmware < 5.0 - Denial of Service

Title source: rule

Description

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

References (1)

[Patch, Vendor Advisory] https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf

Scores

CVSS v3 4.9

EPSS 0.0017

EPSS Percentile 37.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-1286 CWE-20

Status published

Products (50)

siemens/simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware

siemens/simatic_s7-1200_cpu_1211c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1212c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1212fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1214_fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1214c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1214fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1215_fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1215c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1215fc_firmware < 4.6.0

... and 40 more

Published Dec 13, 2022

Tracked Since Feb 18, 2026