CVE-2020-28400: High severity Siemens SIMATIC PROFINET Driver vulnerability
Published Jul 13, 2021
·Updated
Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.
Other sources
Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.
Affected Software
359 affected componentsFixes available
Siemens SIMATIC PROFINET Driver<2.3
2.3
Siemens SIMATIC NET CM 1542-1<3.0
3.0
Siemens SCALANCE X204-2 (incl. SIPLUS NET variant)<5.2.5
5.2.5
Siemens SCALANCE X204-2FM<5.2.5
5.2.5
Siemens SCALANCE X204-2LD (incl. SIPLUS NET variant)<5.2.5
5.2.5
Siemens SCALANCE X20204-2LD TS<5.2.5
5.2.5
Siemens SCALANCE X204 -2TS<5.2.5
5.2.5
Siemens SCALANCE X206-1<5.2.5
5.2.5
Siemens SCALANCE X206-1LD (incl. SIPLUS NET variant)<5.2.5
5.2.5
Siemens SCALANCE X208 (incl. SIPLUS NET variant)<5.2.5
5.2.5
Siemens SCALANCE X208PRO<5.2.5
5.2.5
Siemens SCALANCE X212-2<5.2.5
5.2.5
Siemens SCALANCE X12-2LD<5.2.5
5.2.5
Siemens SCALANCE X216<5.2.5
5.2.5
Siemens SCALANCE X224<5.2.5
5.2.5
Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P
Siemens RUGGEDCOM RM1224<6.4
6.4
Siemens SCALANCE M-800<6.4
6.4
Siemens SCALANCE S615<6.4
6.4
Siemens SCALANCE W700 IEEE 802.11n
Siemens SCALANCE W700 IEEE 802.11ac
Siemens SCALANCE X200-4 P IRT<5.5.0
5.5.0
Siemens SCALANCE X201-3P IRT<5.5.0
5.5.0
Siemens SCALANCE X201-3P IRT PRO<5.5.0
5.5.0
Siemens SCALANCE X202-2 IRT<5.5.0
5.5.0
Siemens SCALANCE X202-2P IRT (incl. SIPLUS NET variant)<5.5.0
5.5.0
Siemens SCALANCE X202-2P IRT PRO<5.5.0
5.5.0
Siemens SCALANCE X204 IRT<5.5.0
5.5.0
Siemens SCALANCE X204 IRT PRO<5.5.0
5.5.0
Siemens SCALANCE X204-2 (incl. SIPLUS NET variant)
Siemens SCALANCE X204-2FM
Siemens SCALANCE X204-2LD (incl. SIPLUS NET variant)
Siemens SCALANCE X20204-2LD TS
Siemens SCALANCE X204 -2TS
Siemens SCALANCE X206-1
Siemens SCALANCE X206-1LD (incl. SIPLUS NET variant)
Siemens SCALANCE X208 (incl. SIPLUS NET variant)
Siemens SCALANCE X208PRO
Siemens SCALANCE X212-2
Siemens SCALANCE X12-2LD
Siemens SCALANCE X216
Siemens SCALANCE X224
Siemens SCALANCE X302-7EEC
Siemens SCALANCE 304-2FE
All of the following
Siemens Dk Standard Ethernet Controller Evaluation Kit Firmware
Siemens Dk Standard Ethernet Controller Evaluation Kit
All of the following
Siemens Ek-ertec 200 Evaulation Kit Firmware
Siemens Ek-ertec 200 Evaulation Kit
All of the following
Siemens Ek-ertec 200p Evaluation Kit Firmware<4.7
Siemens Ek-ertec 200p Evaluation Kit
All of the following
Siemens Ruggedcom Rm1224 Firmware<6.4
Siemens RUGGEDCOM RM1224
All of the following
Siemens Scalance M-800 Firmware<6.4
Siemens SCALANCE M-800
All of the following
Siemens Scalance S615 Firmware<6.4
Siemens SCALANCE S615
All of the following
Siemens Scalance W700 Firmware
Siemens Scalance W700
All of the following
Siemens Scalance W1700 Firmware
Siemens Scalance W1700
All of the following
Siemens Scalance X200-4 P Irt Firmware<5.5.0
Siemens SCALANCE X200-4 P IRT
All of the following
Siemens Scalance X201-3p Irt Firmware<5.5.0
Siemens SCALANCE X201-3P IRT
All of the following
Siemens Scalance X201-3p Irt Pro Firmware<5.5.0
Siemens SCALANCE X201-3P IRT PRO
All of the following
Siemens Scalance X202-2 Irt Firmware<5.5.0
Siemens SCALANCE X202-2 IRT
All of the following
Siemens Scalance X202-2p Irt Pro Firmware<5.5.0
Siemens SCALANCE X202-2P IRT PRO
All of the following
Siemens Scalance X204 Irt Firmware<5.5.0
Siemens SCALANCE X204 IRT
All of the following
Siemens Scalance X204 Irt Pro Firmware<5.5.0
Siemens SCALANCE X204 IRT PRO
All of the following
Siemens Scalance X204-2 Firmware<5.2.5
Siemens Scalance X204-2
All of the following
Siemens Scalance X204-2fm Firmware<5.2.5
Siemens SCALANCE X204-2FM
All of the following
Siemens Scalance X204-2ld Firmware<5.2.5
Siemens Scalance X204-2ld
All of the following
Siemens Scalance X204-2ld Ts Firmware<5.2.5
Siemens Scalance X204-2ld Ts
All of the following
Siemens Scalance X204-2ts Firmware<5.2.5
Siemens Scalance X204-2ts
All of the following
Siemens Scalance X206-1 Firmware<5.2.5
Siemens SCALANCE X206-1
All of the following
Siemens Scalance X206-1ld Firmware<5.2.5
Siemens Scalance X206-1ld
All of the following
Siemens Scalance X208 Firmware<5.2.5
Siemens Scalance X208
All of the following
Siemens Scalance X208pro Firmware<5.2.5
Siemens SCALANCE X208PRO
All of the following
Siemens Scalance X212-2 Firmware<5.2.5
Siemens SCALANCE X212-2
All of the following
Siemens Scalance X212-2ld Firmware<5.2.5
Siemens Scalance X212-2ld
All of the following
Siemens Scalance X216 Firmware<5.2.5
Siemens SCALANCE X216
All of the following
Siemens Scalance X224 Firmware<5.2.5
Siemens SCALANCE X224
All of the following
Siemens Scalance X302-7eec Firmware
Siemens SCALANCE X302-7EEC
All of the following
Siemens Scalance X304-2fe Firmware
Siemens Scalance X304-2fe
All of the following
Siemens Scalance X306-1ldfe Firmware
Siemens Scalance X306-1ldfe
All of the following
Siemens Scalance X307-2eec Firmware
Siemens Scalance X307-2eec
All of the following
Siemens Scalance X307-3 Firmware
Siemens Scalance X307-3
All of the following
Siemens Scalance X307-3ld Firmware
Siemens Scalance X307-3ld
All of the following
Siemens Scalance X308-2 Firmware
Siemens Scalance X308-2
All of the following
Siemens Scalance X308-2ld Firmware
Siemens Scalance X308-2ld
All of the following
Siemens Scalance X308-2lh Firmware
Siemens Scalance X308-2lh
All of the following
Siemens Scalance X308-2lh\+ Firmware
Siemens Scalance X308-2lh\+
All of the following
Siemens Scalance X308-2m Firmware
Siemens Scalance X308-2m
All of the following
Siemens Scalance X308-2m Poe Firmware
Siemens Scalance X308-2m Poe
All of the following
Siemens Scalance X308-2m Ts Firmware
Siemens Scalance X308-2m Ts
All of the following
Siemens Scalance X310 Firmware
Siemens Scalance X310
All of the following
Siemens Scalance X310fe Firmware
Siemens Scalance X310fe
All of the following
Siemens Scalance X320-1fe Firmware
Siemens Scalance X320-1fe
All of the following
Siemens Scalance X320-3ldfe Firmware
Siemens Scalance X320-3ldfe
All of the following
Siemens Scalance Xb-200 Firmware<4.3
Siemens SCALANCE XB-200
All of the following
Siemens Scalance Xc-200 Firmware<4.3
Siemens SCALANCE XC-200
All of the following
Siemens Scalance Xf201-3p Irt Firmware<5.5.0
Siemens Scalance Xf201-3p Irt
All of the following
Siemens Scalance Xf202-2p Irt Firmware<5.5.0
Siemens Scalance Xf202-2p Irt
All of the following
Siemens Scalance Xf204 Firmware<5.2.5
Siemens Scalance Xf204
All of the following
Siemens Scalance Xf204 Irt Firmware<5.5.0
Siemens Scalance Xf204 Irt
All of the following
Siemens Scalance Xf204-2 Firmware<5.2.5
Siemens Scalance Xf204-2
All of the following
Siemens Scalance Xf204-2ba Irt Firmware<5.5.0
Siemens Scalance Xf204-2ba Irt
All of the following
Siemens Scalance Xf206-1 Firmware<5.2.5
Siemens Scalance Xf206-1
All of the following
Siemens Scalance Xf208 Firmware<5.2.5
Siemens Scalance Xf208
All of the following
Siemens Scalance Xf-200ba Firmware<4.3
Siemens SCALANCE XF-200BA
All of the following
Siemens Scalance Xm400 Firmware<6.3.1
Siemens Scalance Xm400
All of the following
Siemens Scalance Xp-200 Firmware<4.3
Siemens SCALANCE XP-200
All of the following
Siemens Scalance Xr324-4m Eec Firmware
Siemens Scalance Xr324-4m Eec
All of the following
Siemens Scalance Xr324-4m Poe Firmware
Siemens Scalance Xr324-4m Poe
All of the following
Siemens Scalance Xr324-4m Poe Ts Firmware
Siemens Scalance Xr324-4m Poe Ts
All of the following
Siemens Scalance Xr324-12m Firmware
Siemens Scalance Xr324-12m
All of the following
Siemens Scalance Xr324-12m Ts Firmware
Siemens Scalance Xr324-12m Ts
All of the following
Siemens Scalance Xr500 Firmware<6.3.1
Siemens Scalance Xr500
All of the following
Siemens Scalance Xr-300wg Firmware<4.3
Siemens SCALANCE XR-300WG
All of the following
Siemens Simatic Cfu Pa Firmware
Siemens Simatic Cfu Pa
All of the following
Siemens Simatic Ie\/pb-link V3 Firmware
Siemens Simatic Ie\/pb-link V3
All of the following
Siemens Simatic Mv500 Firmware<3.0
Siemens Simatic Mv500
All of the following
Siemens Simatic Net Cm 1542-1 Firmware
Siemens SIMATIC NET CM 1542-1
All of the following
Siemens Simatic Net Cp1616 Firmware<=2.7
Siemens Simatic Net Cp1616
All of the following
Siemens Simatic Net Cp1604 Firmware<=2.7
Siemens Simatic Net Cp1604
All of the following
Siemens Simatic Net Cp1626 Firmware
Siemens Simatic Net Cp1626
Siemens Simatic Net Dk-16xx Pn Io<=2.7
All of the following
Siemens Simatic Power Line Booster Plb Firmware
Siemens Simatic Power Line Booster Plb
All of the following
Siemens Simatic Profinet Driver Firmware<2.3
Siemens SIMATIC PROFINET Driver
All of the following
Siemens Simatic S7-1200 Firmware<4.5
Siemens SIMATIC S7-1200
All of the following
Siemens Simocode Prov Ethernet\/ip Firmware<1.1.3
Siemens Simocode Prov Ethernet\/ip
All of the following
Siemens Simocode Prov Profinet Firmware<2.1.3
Siemens Simocode Prov Profinet
All of the following
Siemens Softnet-ie Pnio Firmware
Siemens Softnet-ie Pnio
Siemens Dk Standard Ethernet Controller Evaluation Kit Firmware
Siemens Dk Standard Ethernet Controller Evaluation Kit
Siemens Ek-ertec 200 Evaulation Kit Firmware
Siemens Ek-ertec 200 Evaulation Kit
Siemens Ek-ertec 200p Evaluation Kit Firmware<4.7
Siemens Ek-ertec 200p Evaluation Kit
Siemens Ruggedcom Rm1224 Firmware<6.4
Siemens RUGGEDCOM RM1224
Siemens Scalance M-800 Firmware<6.4
Siemens SCALANCE M-800
Siemens Scalance S615 Firmware<6.4
Siemens SCALANCE S615
Siemens Scalance W700 Firmware
Siemens Scalance W700
Siemens Scalance W1700 Firmware
Siemens Scalance W1700
Siemens Scalance X200-4 P Irt Firmware<5.5.0
Siemens SCALANCE X200-4 P IRT
Siemens Scalance X201-3p Irt Firmware<5.5.0
Siemens SCALANCE X201-3P IRT
Siemens Scalance X201-3p Irt Pro Firmware<5.5.0
Siemens SCALANCE X201-3P IRT PRO
Siemens Scalance X202-2 Irt Firmware<5.5.0
Siemens SCALANCE X202-2 IRT
Siemens Scalance X202-2p Irt Pro Firmware<5.5.0
Siemens SCALANCE X202-2P IRT PRO
Siemens Scalance X204 Irt Firmware<5.5.0
Siemens SCALANCE X204 IRT
Siemens Scalance X204 Irt Pro Firmware<5.5.0
Siemens SCALANCE X204 IRT PRO
Siemens Scalance X204-2 Firmware<5.2.5
Siemens Scalance X204-2
Siemens Scalance X204-2fm Firmware<5.2.5
Siemens SCALANCE X204-2FM
Siemens Scalance X204-2ld Firmware<5.2.5
Siemens Scalance X204-2ld
Siemens Scalance X204-2ld Ts Firmware<5.2.5
Siemens Scalance X204-2ld Ts
Siemens Scalance X204-2ts Firmware<5.2.5
Siemens Scalance X204-2ts
Siemens Scalance X206-1 Firmware<5.2.5
Siemens SCALANCE X206-1
Siemens Scalance X206-1ld Firmware<5.2.5
Siemens Scalance X206-1ld
Siemens Scalance X208 Firmware<5.2.5
Siemens Scalance X208
Siemens Scalance X208pro Firmware<5.2.5
Siemens SCALANCE X208PRO
Siemens Scalance X212-2 Firmware<5.2.5
Siemens SCALANCE X212-2
Siemens Scalance X212-2ld Firmware<5.2.5
Siemens Scalance X212-2ld
Siemens Scalance X216 Firmware<5.2.5
Siemens SCALANCE X216
Siemens Scalance X224 Firmware<5.2.5
Siemens SCALANCE X224
Siemens Scalance X302-7eec Firmware
Siemens SCALANCE X302-7EEC
Siemens Scalance X304-2fe Firmware
Siemens Scalance X304-2fe
Siemens Scalance X306-1ldfe Firmware
Siemens Scalance X306-1ldfe
Siemens Scalance X307-2eec Firmware
Siemens Scalance X307-2eec
Siemens Scalance X307-3 Firmware
Siemens Scalance X307-3
Siemens Scalance X307-3ld Firmware
Siemens Scalance X307-3ld
Siemens Scalance X308-2 Firmware
Siemens Scalance X308-2
Siemens Scalance X308-2ld Firmware
Siemens Scalance X308-2ld
Siemens Scalance X308-2lh Firmware
Siemens Scalance X308-2lh
Siemens Scalance X308-2lh\+ Firmware
Siemens Scalance X308-2lh\+
Siemens Scalance X308-2m Firmware
Siemens Scalance X308-2m
Siemens Scalance X308-2m Poe Firmware
Siemens Scalance X308-2m Poe
Siemens Scalance X308-2m Ts Firmware
Siemens Scalance X308-2m Ts
Siemens Scalance X310 Firmware
Siemens Scalance X310
Siemens Scalance X310fe Firmware
Siemens Scalance X310fe
Siemens Scalance X320-1fe Firmware
Siemens Scalance X320-1fe
Siemens Scalance X320-3ldfe Firmware
Siemens Scalance X320-3ldfe
Siemens Scalance Xb-200 Firmware<4.3
Siemens SCALANCE XB-200
Siemens Scalance Xc-200 Firmware<4.3
Siemens SCALANCE XC-200
Siemens Scalance Xf201-3p Irt Firmware<5.5.0
Siemens Scalance Xf201-3p Irt
Siemens Scalance Xf202-2p Irt Firmware<5.5.0
Siemens Scalance Xf202-2p Irt
Siemens Scalance Xf204 Firmware<5.2.5
Siemens Scalance Xf204
Siemens Scalance Xf204 Irt Firmware<5.5.0
Siemens Scalance Xf204 Irt
Siemens Scalance Xf204-2 Firmware<5.2.5
Siemens Scalance Xf204-2
Siemens Scalance Xf204-2ba Irt Firmware<5.5.0
Siemens Scalance Xf204-2ba Irt
Siemens Scalance Xf206-1 Firmware<5.2.5
Siemens Scalance Xf206-1
Siemens Scalance Xf208 Firmware<5.2.5
Siemens Scalance Xf208
Siemens Scalance Xf-200ba Firmware<4.3
Siemens SCALANCE XF-200BA
Siemens Scalance Xm400 Firmware<6.3.1
Siemens Scalance Xm400
Siemens Scalance Xp-200 Firmware<4.3
Siemens SCALANCE XP-200
Siemens Scalance Xr324-4m Eec Firmware
Siemens Scalance Xr324-4m Eec
Siemens Scalance Xr324-4m Poe Firmware
Siemens Scalance Xr324-4m Poe
Siemens Scalance Xr324-4m Poe Ts Firmware
Siemens Scalance Xr324-4m Poe Ts
Siemens Scalance Xr324-12m Firmware
Siemens Scalance Xr324-12m
Siemens Scalance Xr324-12m Ts Firmware
Siemens Scalance Xr324-12m Ts
Siemens Scalance Xr500 Firmware<6.3.1
Siemens Scalance Xr500
Siemens Scalance Xr-300wg Firmware<4.3
Siemens SCALANCE XR-300WG
Siemens Simatic Cfu Pa Firmware
Siemens Simatic Cfu Pa
Siemens Simatic Ie\/pb-link V3 Firmware
Siemens Simatic Ie\/pb-link V3
Siemens Simatic Mv500 Firmware<3.0
Siemens Simatic Mv500
Siemens Simatic Net Cm 1542-1 Firmware
Siemens SIMATIC NET CM 1542-1
Siemens Simatic Net Cp1616 Firmware<=2.7
Siemens Simatic Net Cp1616
Siemens Simatic Net Cp1604 Firmware<=2.7
Siemens Simatic Net Cp1604
Siemens Simatic Net Cp1626 Firmware
Siemens Simatic Net Cp1626
Siemens Simatic Power Line Booster Plb Firmware
Siemens Simatic Power Line Booster Plb
Siemens Simatic Profinet Driver Firmware<2.3
Siemens SIMATIC PROFINET Driver
Siemens Simatic S7-1200 Firmware<4.5
Siemens SIMATIC S7-1200
Siemens Simocode Prov Ethernet\/ip Firmware<1.1.3
Siemens Simocode Prov Ethernet\/ip
Siemens Simocode Prov Profinet Firmware<2.1.3
Siemens Simocode Prov Profinet
Siemens Softnet-ie Pnio Firmware
Siemens Softnet-ie Pnio
Remediation
Event History
Jul 13, 2021
CVE Published
via MITRE·11:02 AM
Data Sourced
via MITRE·11:02 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-28400?
CVE-2020-28400 has a severity of medium, as it allows unauthenticated attackers to trigger a denial of service condition.
2
How do I fix CVE-2020-28400?
To fix CVE-2020-28400, update the affected devices to the latest firmware versions as specified by Siemens.
3
Which products are affected by CVE-2020-28400?
CVE-2020-28400 affects various Siemens products including SIMATIC PROFINET Driver Firmware versions up to 2.3 and several SCALANCE device versions below 5.2.5.
4
What kind of attack can exploit CVE-2020-28400?
CVE-2020-28400 can be exploited by sending a large volume of DCP reset packets to interrupt service on the affected devices.
5
Is there a workaround for CVE-2020-28400?
Currently, there is no specific workaround for CVE-2020-28400; updating to the fixed firmware is the recommended course of action.