ICSA-21-194-03: Siemens simatic profinet driver firmware vulnerability
Affected Software
46 affected componentsFixes available
Siemens SIMATIC PROFINET Driver<2.3
2.3
Siemens SIMATIC NET CM 1542-1<3.0
3.0
Siemens SCALANCE X204-2 (incl. SIPLUS NET variant)<5.2.5
5.2.5
Siemens SCALANCE X204-2FM<5.2.5
5.2.5
Siemens SCALANCE X204-2LD (incl. SIPLUS NET variant)<5.2.5
5.2.5
Siemens SCALANCE X20204-2LD TS<5.2.5
5.2.5
Siemens SCALANCE X204 -2TS<5.2.5
5.2.5
Siemens SCALANCE X206-1<5.2.5
5.2.5
Siemens SCALANCE X206-1LD (incl. SIPLUS NET variant)<5.2.5
5.2.5
Siemens SCALANCE X208 (incl. SIPLUS NET variant)<5.2.5
5.2.5
Siemens SCALANCE X208PRO<5.2.5
5.2.5
Siemens SCALANCE X212-2<5.2.5
5.2.5
Siemens SCALANCE X12-2LD<5.2.5
5.2.5
Siemens SCALANCE X216<5.2.5
5.2.5
Siemens SCALANCE X224<5.2.5
5.2.5
Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P
Siemens RUGGEDCOM RM1224<6.4
6.4
Siemens SCALANCE M-800<6.4
6.4
Siemens SCALANCE S615<6.4
6.4
Siemens SCALANCE W700 IEEE 802.11n
Siemens SCALANCE W700 IEEE 802.11ac
Siemens SCALANCE X200-4 P IRT<5.5.0
5.5.0
Siemens SCALANCE X201-3P IRT<5.5.0
5.5.0
Siemens SCALANCE X201-3P IRT PRO<5.5.0
5.5.0
Siemens SCALANCE X202-2 IRT<5.5.0
5.5.0
Siemens SCALANCE X202-2P IRT (incl. SIPLUS NET variant)<5.5.0
5.5.0
Siemens SCALANCE X202-2P IRT PRO<5.5.0
5.5.0
Siemens SCALANCE X204 IRT<5.5.0
5.5.0
Siemens SCALANCE X204 IRT PRO<5.5.0
5.5.0
Siemens SCALANCE X204-2 (incl. SIPLUS NET variant)
Siemens SCALANCE X204-2FM
Siemens SCALANCE X204-2LD (incl. SIPLUS NET variant)
Siemens SCALANCE X20204-2LD TS
Siemens SCALANCE X204 -2TS
Siemens SCALANCE X206-1
Siemens SCALANCE X206-1LD (incl. SIPLUS NET variant)
Siemens SCALANCE X208 (incl. SIPLUS NET variant)
Siemens SCALANCE X208PRO
Siemens SCALANCE X212-2
Siemens SCALANCE X12-2LD
Siemens SCALANCE X216
Siemens SCALANCE X224
Siemens SCALANCE X302-7EEC
Siemens SCALANCE 304-2FE
Event History
Mar 27, 2025
Advisory Published
12:24 PM
Frequently Asked Questions
1
What is the severity of ICSA-21-194-03?
The severity of ICSA-21-194-03 is rated as high due to potential exploitation impacts.
2
How do I fix ICSA-21-194-03?
To fix ICSA-21-194-03, update the firmware of affected Siemens SCALANCE devices to the latest version provided by Siemens.
3
What devices are affected by ICSA-21-194-03?
ICSA-21-194-03 affects multiple Siemens SCALANCE models including X204-2, X206-1, and X208.
4
What type of vulnerabilities are associated with ICSA-21-194-03?
ICSA-21-194-03 is associated with improper input validation vulnerabilities.
5
What impacts can ICSA-21-194-03 have on systems?
ICSA-21-194-03 can lead to unauthorized access and potential disruption of services on affected systems.