Siemens SIMATIC S7-1500/1200 Remote Denial of Service Vulnerability (CVE-2024-23814)

Key Information Vulnerability Overview CVE ID: CVE-2024-23814 CVSS v3.1 Base Score: 5.3 CVSS v3.1 Overall Score: 6.9 Summary: A vulnerability exists in affected products that could allow a remote attacker to compromise the availability of the device under specific conditions. Affected Products and Solutions SIMATIC S7-1500 CPU Family (including ET200SP and SIPLESUPLUS variants): No fix planned at this time. SIMATIC S7-1200 CPU Family (including SIPLESUPLUS variants): No fix planned at this time. SIMATIC S7-1500 IM 155-6 PN HF (including SIPLESUPLUS variants): No fix planned at this time. SIMATIC S7-1500 IM 155-6 PN ST (including SIPLESUPLUS variants): No fix planned at this time. SIMATIC S7-1500 IM 155-6 PN HF V2: Upgrade to V2.0 or later. SIMATIC S7-1500 IM 155-6 PN ST V2: Upgrade to V2.0 or later. SIMATIC S7-1500 IM 155-6 PN HF V3: Upgrade to V3.0 or later. SIMATIC S7-1500 IM 155-6 PN ST V3: Upgrade to V3.0 or later. SIMATIC S7-1500 IM 155-6 PN HF V4: Upgrade to V4.0 or later. SIMATIC S7-1500 IM 155-6 PN ST V4: Upgrade to V4.0 or later. Exploit Mechanism and Mitigation Siemens provides specific details on the exploit mechanism and mitigation measures for this vulnerability. Customers can apply these measures to reduce risk. General Security Recommendations Siemens recommends protecting network access to devices and using appropriate security mechanisms. To operate devices in a protected industrial environment, Siemens advises following its industrial security guidelines. Product Description Describes the affected vulnerabilities (CVE-ID) and how they are impacted by this vulnerability. Additional Information Provides additional details and historical data regarding this security advisory.

Goal Reached Thanks to every supporter — we hit 100%!

Siemens SIMATIC S7-1500/1200 Remote Denial of Service Vulnerability (CVE-2024-23814)