Siemens SIMATIC CP Device Uncontrolled Resource Consumption Vulnerability

The SIMATIC CP 1623, CP 1626 and CP 1628 are PCI express cards for connection to industrial Ethernet. the SIMATIC CP 1604 and CP 1616 are PCI/PCI-104 cards for the connection of field devices to PROFINET industrial Ethernet. The Siemens SIMATIC CP devices are vulnerable to an uncontrolled resource consumption vulnerability due to the affected devices not being able to adequately control the sequential mapping of direct memory access (DMA) requests. An attacker could exploit this vulnerability to cause a denial of service on the host. A physical power cycle is required to get the system working again.