CVE-2021-40368

🗓️ 12 Apr 2022 09:07:23Reported by siemensType

Vulnerability in SIMATIC S7-400 CPU family allows DoS via crafted packets

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2021-40368	12 Apr 202212:23	–	circl
CNNVD	Siemens SIMATIC S7-400 缓冲区错误漏洞	12 Apr 202200:00	–	cnnvd
CNVD	Siemens SIMATIC S7-400 CPU Denial of Service Vulnerability	13 Apr 202200:00	–	cnvd
Cvelist	CVE-2021-40368	12 Apr 202209:07	–	cvelist
EUVD	EUVD-2021-27546	3 Oct 202520:07	–	euvd
ICS	Siemens SIMATIC S7-400	12 Apr 202200:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	12 Apr 202200:00	–	ncsc
NVD	CVE-2021-40368	12 Apr 202209:15	–	nvd
Prion	Design/Logic Flaw	12 Apr 202209:15	–	prion
Positive Technologies	PT-2021-7270 · Siemens · Simatic S7-400 Cpu 416-3 Pn/Dp V7 +13	1 Sep 202100:00	–	ptsecurity

NVD

Node

siemens simatic_s7-400h_v6_firmwareRange<6.0.10

AND

siemens simatic_s7-400h_v6Match-

Node

siemens simatic_s7-400_pn/dp_v7_firmware

AND

siemens simatic_s7-400_pn/dp_v7Match-

Node

siemens simatic_s7-410_v8_firmware

AND

siemens simatic_s7-410_v8Match-

Node

siemens simatic_s7-410_v10_firmwareRange<10.1

AND

siemens simatic_s7-410_v10Match-

[
  {
    "vendor": "Siemens",
    "product": " SIMATIC S7-400 CPU 412-1 DP V7",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": " SIMATIC S7-400 CPU 412-2 DP V7",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": " SIMATIC S7-400 CPU 412-2 PN/DP V7",
    "versions": [
      {
        "version": "All versions < V7.0.3",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": " SIMATIC S7-400 CPU 414-2 DP V7",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": " SIMATIC S7-400 CPU 414-3 DP V7",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": " SIMATIC S7-400 CPU 414-3 PN/DP V7",
    "versions": [
      {
        "version": "All versions < V7.0.3",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": " SIMATIC S7-400 CPU 414F-3 PN/DP V7",
    "versions": [
      {
        "version": "All versions < V7.0.3",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": " SIMATIC S7-400 CPU 416-2 DP V7",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": " SIMATIC S7-400 CPU 416-3 DP V7",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": " SIMATIC S7-400 CPU 416-3 PN/DP V7",
    "versions": [
      {
        "version": "All versions < V7.0.3",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": " SIMATIC S7-400 CPU 416F-2 DP V7",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": " SIMATIC S7-400 CPU 416F-3 PN/DP V7",
    "versions": [
      {
        "version": "All versions < V7.0.3",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": " SIMATIC S7-400 CPU 417-4 DP V7",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)",
    "versions": [
      {
        "version": "All versions < V6.0.10",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)",
    "versions": [
      {
        "version": "All versions < V10.1",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)",
    "versions": [
      {
        "version": "All versions < V8.2.3",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS S7-400 CPU 414-3 PN/DP V7",
    "versions": [
      {
        "version": "All versions < V7.0.3",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS S7-400 CPU 416-3 PN/DP V7",
    "versions": [
      {
        "version": "All versions < V7.0.3",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS S7-400 CPU 416-3 V7",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS S7-400 CPU 417-4 V7",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-557541.pdf

21 Nov 2024 06:23Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 3.17.5

EPSS0.00444

SSVC

CWE-119