CVE-2021-44695

MEDIUM

Siemens Simatic S7-plcsim Advanced Firmware < 5.0 - Denial of Service

Title source: rule

Description

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

References (1)

[Patch, Vendor Advisory] https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf

Scores

CVSS v3 4.9

EPSS 0.0017

EPSS Percentile 38.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-1286 CWE-20

Status published

Affected Products (50)

siemens/simatic_s7-plcsim_advanced_firmware < 5.0

siemens/simatic_s7-1200_cpu_1211c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1212c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1212fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1214_fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1214c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1214fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1215_fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1215c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1215fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_1217c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_12_1211c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_12_1212c_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_12_1212fc_firmware < 4.6.0

siemens/simatic_s7-1200_cpu_12_1214c_firmware < 4.6.0

... and 35 more

Timeline

Published Dec 13, 2022

Tracked Since Feb 18, 2026