plc.myforum.ro PLCs users www.plc.myforum.ro!    FAQ   Search   Memberlist   Usergroups   Register   Profile   Log in to check your private messages   Log in  Vulnerability SSA-593272 IP-Stack Industrial EK-ERTEC 200          plc.myforum.ro Forum Index -> FAQs & News View previous topic :: View next topic   Author Message AnteSavilt Member 2 Joined: 13 Feb 2018 Posts: 264 Location: Croatia Posted: 24/02/2021 23:14    Post subject: Vulnerability SSA-593272 IP-Stack Industrial EK-ERTEC 200 Vulnerability "SSA-593272: SegmentSmack in Interniche IP-Stack based Industrial" for EK-ERTEC 200 and EK-ERTEC 200P https://support.industry.siemens.com/cs/document/109793355/ This vulnerability exists for EK-ERTEC 200 and EK-ERTEC 200P products which are using Interniche communication stack that could allow remote attackers to affect the availability of the devices under certain conditions. Overview This vulnerability exists in ERTEC200 and ERTEC200P products which are using Interniche communication stack that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack which is Interniche in this case can be forced to make very computation expensive calls for every incoming packet which can lead to a Denial-of-Service. The usage of TCP communication is not required by PROFINET communication, therefore, the TCP communication is not used in the delivery of the products. If the customers want to use the TCP communication layer that comes with the Interniche stack, they shall follow the recommendation of the Siemens Security Advisory to avoid any security risk regarding this vulnerability. Affected Products PROFINET IO Device EK-ERTEC 200 PN IO All versions PROFINET IO Device EK-ERTEC 200P PN IO All versions Recommendation You can find the recommendation of the Siemens Security Advisory below: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security ), and to follow the recommendations in the product manuals. https://www.upload.ee/files/12930985/operational-guidelines-industrial-security.pdf.html https://anonfiles.com/h9ies463q3/operational-guidelines-industrial-security_pdf https://ulozto.net/file/d7e7TG89IfC8/operational-guidelines-industrial-security-pdf Code: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 # SSA-593272: SegmentSmack in Interniche IP-Stack based Industrial Devices Publication Date:        2020-04-14 Last Update:             2020-05-12 Current Version:         1.1 CVSS v3.1 Base Score:    7.5 SUMMARY ======= A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which can lead to a Denial-of-Service. AFFECTED PRODUCTS AND SOLUTION ============================== * KTK ATE530S   - Affected versions:        All versions   - Remediation:         See recommendations from section Workarounds and Mitigations * SIDOOR ATD430W   - Affected versions:        All versions   - Remediation:         See recommendations from section Workarounds and Mitigations * SIDOOR ATE530S COATED   - Affected versions:        All versions   - Remediation:         See recommendations from section Workarounds and Mitigations * SIDOOR ATE531S   - Affected versions:        All versions   - Remediation:         See recommendations from section Workarounds and Mitigations * SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)   - Affected versions:        All versions < V2.0   - Remediation:        Update to V2.1.7   - Download:        https://support.industry.siemens.com/cs/ww/en/view/109759122/ * SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)   - Affected versions:        All versions <V2>= V4.2   - Remediation:         See recommendations from section Workarounds and Mitigations * SIMATIC ET200SP IM155-6 MF HF   - Affected versions:        All versions   - Remediation:         See recommendations from section Workarounds and Mitigations * SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants)   - Affected versions:        All versions   - Remediation:         See recommendations from section Workarounds and Mitigations * SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants)   - Affected versions:        All versions >= V4.2   - Remediation:         See recommendations from section Workarounds and Mitigations * SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants)   - Affected versions:        All versions >= V4.2   - Remediation:         See recommendations from section Workarounds and Mitigations * SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants)   - Affected versions:        All versions >= V4.2   - Remediation:         See recommendations from section Workarounds and Mitigations * SIMATIC MICRO-DRIVE PDC   - Affected versions:        All versions   - Remediation:         See recommendations from section Workarounds and Mitigations * SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)   - Affected versions:        All versions >= V4.2   - Remediation:         See recommendations from section Workarounds and Mitigations * SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)   - Affected versions:        All versions < V2.0   - Remediation:        Update to V2.8 if possible   - Download:        https://support.industry.siemens.com/cs/ww/en/view/109773807/ * SIMATIC S7-1500 Software Controller   - Affected versions:        All versions < V2.0   - Remediation:        Update to V20.8   - Download:        https://support.industry.siemens.com/cs/ww/en/view/109772864/ * SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)   - Affected versions:        All versions   - Remediation:         See recommendations from section Workarounds and Mitigations * SIMATIC S7-400 H V6 CPU family and below (incl. SIPLUS variants)   - Affected versions:        All versions   - Remediation:         See recommendations from section Workarounds and Mitigations * SIMATIC S7-400 PN/DP V7 and below CPU family (incl. SIPLUS variants)   - Affected versions:        All versions   - Remediation:         See recommendations from section Workarounds and Mitigations * SIMATIC S7-410 CPU family (incl. SIPLUS variants)   - Affected versions:        All versions   - Remediation:         See recommendations from section Workarounds and Mitigations * SIMATIC TDC CP51M1   - Affected versions:        All versions   - Remediation:         See recommendations from section Workarounds and Mitigations * SIMATIC TDC CPU555   - Affected versions:        All versions   - Remediation:         See recommendations from section Workarounds and Mitigations * SIMATIC WinAC RTX (F) 2010   - Affected versions:        All versions   - Remediation:         See recommendations from section Workarounds and Mitigations * SINAMICS S/G Control Unit w. PROFINET   - Affected versions:        All versions   - Remediation:         See recommendations from section Workarounds and Mitigations WORKAROUNDS AND MITIGATIONS =========================== Siemens has not identified any specific mitigations or workarounds. Please follow General Security Recommendations. GENERAL SECURITY RECOMMENDATIONS ================================ As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity PRODUCT DESCRIPTION =================== SIDOOR is an automatic door management system that offers diverse application options and benefits in elevator, industrial and railway applications. SIMATIC ET 200 Interface modules for PROFINET IO are used to connect field devices (IO Devices) to controllers (IO Controller) via PROFINET. The SIMATIC ET 200SP Open Controller is a PC-based version of the SIMATIC S7-1500 Controller including optional visualization in combination with central I/Os in a compact device. SIMATIC MICRO-DRIVE PDC are drive converters for servo drives in the protective extra low voltage range. Products of the SIMATIC S7-1500 CPU family have been designed for discrete and continuous control in industrial environments such as manufacturing, food and beverages, and chemical industries worldwide. SIMATIC S7-1500 Software Controller is a SIMATIC software controller for PC-based automation solutions. Products of the Siemens SIMATIC S7-300 CPU family have been designed for discrete and continuous control in industrial environments such as manufacturing, food and beverages, and chemical industries worldwide. Products in the SIMATIC S7-400 CPU family have been designed for process control in industrial environments. They are used worldwide, e.g. in the automotive industry, mechanical equipment manufacture, warehousing systems, building engineering, steel industry, power generation and distribution, pharmaceuticals, food and beverages industry, or chemical industry. SIMATIC TDC is a multiprocessor automation system for drive, control and technology tasks. The system is used particularly for large plants. SIMATIC WinAC RTX (F) 2010 is a SIMATIC software controller for PC-based automation solutions. The SINAMICS converter family is used to control a wide variety of drives, especially in mechanical engineering and plant construction. PN/PN coupler is used for connecting two PROFINET networks. SIPLUS extreme products are designed for reliable operation under extreme conditions and are based on SIMATIC, LOGO!, SITOP, SINAMICS, SIMOTION, SCALANCE or other devices. SIPLUS devices use the same firmware as the product they are based on. VULNERABILITY CLASSIFICATION ============================ The vulnerability classification has been performed by using the CVSS scoring system in version 3.1 (CVSS v3.1) (https://www.first.org/cvss/). The CVSS environmental score is specific to the customer's environment and will impact the overall CVSS score. The environmental score should therefore be individually defined by the customer to accomplish final scoring. An additional classification has been performed using the CWE classification, a community-developed list of common software security weaknesses. This serves as a common language and as a baseline for weakness identification, mitigation, and prevention efforts. A detailed list of CWE classes can be found at: https://cwe.mitre.org/. * Vulnerability CVE-2019-19300   The Interniche-based TCP Stack can be forced to make very expensive   calls for every incoming packet which can lead to a denial of service.   CVSS v3.1 Base Score: 7.5   CVSS Vector:          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C   CWE:                  CWE-400: Uncontrolled Resource Consumption ADDITIONAL INFORMATION ====================== For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories HISTORY DATA ============ V1.0 (2020-04-14): Publication Date V1.1 (2020-05-12): Added SIMATIC S7-400 H V6 CPU family and below to the list of affected products TERMS OF USE ============ Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use. -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJeuecAAAoJENP0geoRSq/kvoIP+QH+Lm1fV9Gih0xOe+HOYEYu E96fJrabH5m5k/FJlQWS0qZPnyu8ISYb8bH4W9MEdhbyKIlNt826mF9AUzFfWU5Y raQiYIzGmOaepxIi3XYo6NpvPPrUf+vdFFcGxgeWRasf2wG0FyRclDbMjNU8qSD3 yN6gApVjzhHKcw3re6L6wB+B708jKnUG624P7BW2vykbY7lf8X4i8D2O3kiq+uE1 3kNNejHLWOBcN7HAwj4OphMz52jAn28f92husKKsnh1eAeOtvnUtdmpYoH/KhrUZ MlugjgK20jgesLXDRlRpYqZkQNqEmHCJXWTBLbz7gS3Wz9NjM4kdw2aeZus2zA1N ge2JZypbqtvMX3rjnl4T6+FsJNZP2Oxu2oHAtt6cADvmVSZ6H4e9p0hps01pKv+V 5O5zjJdxLhI5QKvVmwHfdOekmKf3kHKL1NovVfu0fghY450IWhKxc4qoe7TVBWVt msAAUukWvSBTR89FcrOHAIGF4seUraiI80LRNHkoie62gtlPF+sxpd6wcGcJmx1r dcJfgXMQMMKxAYFi9DcGTAZWT8dFsLNLKdkV2QHH8o2CM/VrGEMvKGKpO4EQCES+ dvup18AO9LXxPIf3AMl9oqhKe6YdSkHauUO6rOotfqrkwQ44v4JIiw1iaFJXF1Za KB1B33KlweARWdK+Of6m =PLen -----END PGP SIGNATURE----- Back to top Display posts from previous:  Oldest FirstNewest First         plc.myforum.ro Forum Index -> FAQs & News All times are GMT + 2 Hours Page 1 of 1   Jump to: Select a forum PLC's Users International Forum----------------Board RulesPLC TutorialsSIMATIC Automation Systems -Reg.USimatic Automation SystemsLinksGE Fanuc Emerson Reg. UGE Fanuc Emerson ALLEN-BRADLEY(Rockwell Automation) Reg. UALLEN-BRADLEY(Rockwell Automation)OMRON Reg. UOMRONHONEYWELLSchneider_Electric Reg. USchneider ElectricOther PLCs Reg. UOther PLCsSIEMENS SIMATIC HMI- Reg. USIEMENS SIMATIC HMIOther HMI-Reg. UOther HMICNC & Robotics-Reg. UCNC & RoboticsProgramming Reg. UProgrammingAutoCAD Reg. UAutoCADRenewable EnergyBuilding Technology ManagementPLC BooksCables, Sensors,Transducers ...Drives & InvertersSiemens Hardware & SoftwareSafety Military & AerospaceUtilitiesFAQs & NewsJobsDisclaimer Romanian Users Forum----------------ROSIEMENS SIMATIC Automation SystemsROSIEMENS SIMATIC HMIROSimatic ROther PLCsROther HMIBooksROCADRUtilitieseLearningSimulatorsApplication Examples  You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum Powered by phpBB © 2001, 2005 phpBB Group Fa-ti si tu propriul forum GRATUIT, pe www.myforum.ro