siemens simatic-s7-1500-software-controller CVE-2018-4843 vulnerability in Siemens Products
Published on March 20, 2018

A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 Advanced (All versions < V3.3), SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions < V3.2.16), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V1.7.0), SIMATIC S7-1500 Software Controller (All versions < V1.7.0), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions < V3.3.16), SIMATIC S7-300 CPU 315-2 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 317-2 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 319-3 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions < V3.2.16), SIMATIC S7-400 CPU 412-2 PN V7 (All versions < V7.0.3), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.9), SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.7), SIMATIC S7-410 CPU family (incl. SIPLUS variants) (All versions < V8.1), SIMATIC WinAC RTX 2010 (All versions < V2010 SP3), SIMATIC WinAC RTX F 2010 (All versions < V2010 SP3), SINUMERIK 828D (All versions < V4.7 SP6 HF1), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions < V3.2.16), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions < V3.2.16), SIPLUS NET CP 443-1 (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (All versions < V3.3), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions < V3.3.16), SIPLUS S7-300 CPU 315-2 PN/DP (All versions < V3.2.16), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions < V3.2.16), SIPLUS S7-300 CPU 317-2 PN/DP (All versions < V3.2.16), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions < V3.2.16), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), Softnet PROFINET IO for PC-based Windows systems (All versions). Responding to a PROFINET DCP request with a specially crafted PROFINET DCP packet could cause a denial of service condition of the requesting system. The security vulnerability could be exploited by an attacker located on the same Ethernet segment (OSI Layer 2) as the targeted device. A manual restart is required to recover the system.

NVD

Weakness Type

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.


Products Associated with CVE-2018-4843

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-4843 are published in these products:

Siemens Simatic S7 1500 Software Controller
 
Siemens Simatic Winac Rtx F 2010
 
Siemens Sinumerik 828d
 

Affected Versions

Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7: Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7: Siemens SIMATIC S7-400 CPU 416-3 PN/DP V7: Siemens SIMATIC S7-400 CPU 416F-3 PN/DP V7: Siemens SIMATIC CP 343-1 (incl. SIPLUS variants): Siemens SIMATIC CP 343-1 Advanced (incl. SIPLUS variants): Siemens SIMATIC CP 443-1: Siemens SIMATIC CP 443-1: Siemens SIMATIC CP 443-1 Advanced: Siemens SIMATIC ET 200pro IM154-8 PN/DP CPU: Siemens SIMATIC ET 200pro IM154-8F PN/DP CPU: Siemens SIMATIC ET 200pro IM154-8FX PN/DP CPU: Siemens SIMATIC ET 200S IM151-8 PN/DP CPU: Siemens SIMATIC ET 200S IM151-8F PN/DP CPU: Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): Siemens SIMATIC S7-1500 Software Controller: Siemens SIMATIC S7-300 CPU 314C-2 PN/DP: Siemens SIMATIC S7-300 CPU 315-2 PN/DP: Siemens SIMATIC S7-300 CPU 315F-2 PN/DP: Siemens SIMATIC S7-300 CPU 315T-3 PN/DP: Siemens SIMATIC S7-300 CPU 317-2 PN/DP: Siemens SIMATIC S7-300 CPU 317F-2 PN/DP: Siemens SIMATIC S7-300 CPU 317T-3 PN/DP: Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP: Siemens SIMATIC S7-300 CPU 319-3 PN/DP: Siemens SIMATIC S7-300 CPU 319F-3 PN/DP: Siemens SIMATIC S7-400 CPU 412-2 PN V7: Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants): Siemens SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants): Siemens SIMATIC S7-410 CPU family (incl. SIPLUS variants): Siemens SIMATIC WinAC RTX 2010: Siemens SIMATIC WinAC RTX F 2010: Siemens SINUMERIK 828D: Siemens SIPLUS ET 200S IM151-8 PN/DP CPU: Siemens SIPLUS ET 200S IM151-8F PN/DP CPU: Siemens SIPLUS NET CP 443-1: Siemens SIPLUS NET CP 443-1 Advanced: Siemens SIPLUS S7-300 CPU 314C-2 PN/DP: Siemens SIPLUS S7-300 CPU 315-2 PN/DP: Siemens SIPLUS S7-300 CPU 315F-2 PN/DP: Siemens SIPLUS S7-300 CPU 317-2 PN/DP: Siemens SIPLUS S7-300 CPU 317F-2 PN/DP: Siemens SIPLUS S7-400 CPU 414-3 PN/DP V7: Siemens SIPLUS S7-400 CPU 416-3 PN/DP V7: Siemens Softnet PROFINET IO for PC-based Windows systems:

Exploit Probability

EPSS
0.25%
Percentile
48.14%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.