{ "containers": { "cna": { "providerMetadata": { "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2023-04-11T09:02:03.176Z" }, "descriptions": [ { "lang": "en", "value": "A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-3 DP V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416-2 DP V7 (All versions), SIMATIC S7-400 CPU 416-3 DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416F-2 DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 417-4 DP V7 (All versions), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.10), SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) (All versions < V10.1), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) (All versions < V8.2.3), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 V7 (All versions), SIPLUS S7-400 CPU 417-4 V7 (All versions). Affected devices improperly handle specially crafted packets sent to port 102/tcp.\n\nThis could allow an attacker to create a Denial-of-Service condition. A restart is needed to restore normal operations." } ], "affected": [ { "vendor": "Siemens", "product": " SIMATIC S7-400 CPU 412-1 DP V7", "versions": [ { "version": "All versions", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": " SIMATIC S7-400 CPU 412-2 DP V7", "versions": [ { "version": "All versions", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": " SIMATIC S7-400 CPU 412-2 PN/DP V7", "versions": [ { "version": "All versions < V7.0.3", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": " SIMATIC S7-400 CPU 414-2 DP V7", "versions": [ { "version": "All versions", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": " SIMATIC S7-400 CPU 414-3 DP V7", "versions": [ { "version": "All versions", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": " SIMATIC S7-400 CPU 414-3 PN/DP V7", "versions": [ { "version": "All versions < V7.0.3", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": " SIMATIC S7-400 CPU 414F-3 PN/DP V7", "versions": [ { "version": "All versions < V7.0.3", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": " SIMATIC S7-400 CPU 416-2 DP V7", "versions": [ { "version": "All versions", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": " SIMATIC S7-400 CPU 416-3 DP V7", "versions": [ { "version": "All versions", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": " SIMATIC S7-400 CPU 416-3 PN/DP V7", "versions": [ { "version": "All versions < V7.0.3", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": " SIMATIC S7-400 CPU 416F-2 DP V7", "versions": [ { "version": "All versions", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": " SIMATIC S7-400 CPU 416F-3 PN/DP V7", "versions": [ { "version": "All versions < V7.0.3", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": " SIMATIC S7-400 CPU 417-4 DP V7", "versions": [ { "version": "All versions", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)", "versions": [ { "version": "All versions < V6.0.10", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)", "versions": [ { "version": "All versions < V10.1", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)", "versions": [ { "version": "All versions < V8.2.3", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SIPLUS S7-400 CPU 414-3 PN/DP V7", "versions": [ { "version": "All versions < V7.0.3", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SIPLUS S7-400 CPU 416-3 PN/DP V7", "versions": [ { "version": "All versions < V7.0.3", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SIPLUS S7-400 CPU 416-3 V7", "versions": [ { "version": "All versions", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SIPLUS S7-400 CPU 417-4 V7", "versions": [ { "version": "All versions", "status": "affected" } ], "defaultStatus": "unknown" } ], "metrics": [ { "cvssV3_1": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "baseScore": 7.5, "baseSeverity": "HIGH" } } ], "problemTypes": [ { "descriptions": [ { "lang": "en", "cweId": "CWE-119", "description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer", "type": "CWE" } ] } ], "references": [ { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-557541.pdf" } ] }, "adp": [ { "providerMetadata": { "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T02:44:09.608Z" }, "title": "CVE Program Container", "references": [ { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-557541.pdf", "tags": [ "x_transferred" ] } ] } ] }, "cveMetadata": { "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "assignerShortName": "siemens", "cveId": "CVE-2021-40368", "datePublished": "2022-04-12T09:07:23", "dateReserved": "2021-09-01T00:00:00", "dateUpdated": "2024-08-04T02:44:09.608Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }