Description (CNA)
Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller | affected 0 before * |
| Siemens / Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 | affected All Versions < V4.5 |
| Siemens / Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P | affected All Versions < V4.6 |
| Siemens / PROFINET Driver for Controller | affected All Versions < V2.1 |
| Siemens / RUGGEDCOM RM1224 family | affected All versions < V4.3 |
| Siemens / SCALANCE M804PB | affected All versions < V4.3 |
| Siemens / SCALANCE M812-1 ADSL-Router | affected All versions < V4.3 |
| Siemens / SCALANCE M812-1 ADSL-Router | affected All versions < V4.3 |
| Siemens / SCALANCE M816-1 ADSL-Router | affected All versions < V4.3 |
| Siemens / SCALANCE M816-1 ADSL-Router | affected All versions < V4.3 |
| Siemens / SCALANCE M826-2 SHDSL-Router | affected All versions < V4.3 |
| Siemens / SCALANCE M874-2 | affected All versions < V4.3 |
| Siemens / SCALANCE M874-3 | affected All versions < V4.3 |
| Siemens / SCALANCE M876-3 | affected All versions < V4.3 |
| Siemens / SCALANCE M876-3 (ROK) | affected All versions < V4.3 |
| Siemens / SCALANCE M876-4 (EU) | affected All versions < V4.3 |
| Siemens / SCALANCE M876-4 (NAM) | affected All versions < V4.3 |
| Siemens / SCALANCE S615 LAN-Router | affected All versions < V4.3 |
| Siemens / SCALANCE W-700 IEEE 802.11n family | affected All versions <= V6.0.1 |
| Siemens / SCALANCE X200-4P IRT | affected All Versions < V5.3 |
| Siemens / SCALANCE X201-3P IRT | affected All Versions < V5.3 |
| Siemens / SCALANCE X201-3P IRT PRO | affected All Versions < V5.3 |
| Siemens / SCALANCE X202-2IRT | affected All Versions < V5.3 |
| Siemens / SCALANCE X202-2P IRT | affected All Versions < V5.3 |
| Siemens / SCALANCE X202-2P IRT PRO | affected All Versions < V5.3 |
| Siemens / SCALANCE X204-2 | affected All versions < V5.2.5 |
| Siemens / SCALANCE X204-2FM | affected All versions < V5.2.5 |
| Siemens / SCALANCE X204-2LD | affected All versions < V5.2.5 |
| Siemens / SCALANCE X204-2LD TS | affected All versions < V5.2.5 |
| Siemens / SCALANCE X204-2TS | affected All versions < V5.2.5 |
| Siemens / SCALANCE X204IRT | affected All Versions < V5.3 |
| Siemens / SCALANCE X204IRT PRO | affected All Versions < V5.3 |
| Siemens / SCALANCE X206-1 | affected All versions < V5.2.5 |
| Siemens / SCALANCE X206-1LD | affected All versions < V5.2.5 |
| Siemens / SCALANCE X208 | affected All versions < V5.2.5 |
| Siemens / SCALANCE X208PRO | affected All versions < V5.2.5 |
| Siemens / SCALANCE X212-2 | affected All versions < V5.2.5 |
| Siemens / SCALANCE X212-2LD | affected All versions < V5.2.5 |
| Siemens / SCALANCE X216 | affected All versions < V5.2.5 |
| Siemens / SCALANCE X224 | affected All versions < V5.2.5 |
| Siemens / SCALANCE X302-7 EEC (230V, coated) | affected All versions < V4.1.4 |
| Siemens / SCALANCE X302-7 EEC (230V) | affected All versions < V4.1.4 |
| Siemens / SCALANCE X302-7 EEC (24V, coated) | affected All versions < V4.1.4 |
| Siemens / SCALANCE X302-7 EEC (24V) | affected All versions < V4.1.4 |
| Siemens / SCALANCE X302-7 EEC (2x 230V, coated) | affected All versions < V4.1.4 |
| Siemens / SCALANCE X302-7 EEC (2x 230V) | affected All versions < V4.1.4 |
| Siemens / SCALANCE X302-7 EEC (2x 24V, coated) | affected All versions < V4.1.4 |
| Siemens / SCALANCE X302-7 EEC (2x 24V) | affected All versions < V4.1.4 |
| Siemens / SCALANCE X304-2FE | affected All versions < V4.1.4 |
| Siemens / SCALANCE X306-1LD FE | affected All versions < V4.1.4 |
| Siemens / SCALANCE X307-2 EEC (230V, coated) | affected All versions < V4.1.4 |
| Siemens / SCALANCE X307-2 EEC (230V) | affected All versions < V4.1.4 |
| Siemens / SCALANCE X307-2 EEC (24V, coated) | affected All versions < V4.1.4 |
| Siemens / SCALANCE X307-2 EEC (24V) | affected All versions < V4.1.4 |
| Siemens / SCALANCE X307-2 EEC (2x 230V, coated) | affected All versions < V4.1.4 |
| Siemens / SCALANCE X307-2 EEC (2x 230V) | affected All versions < V4.1.4 |
| Siemens / SCALANCE X307-2 EEC (2x 24V, coated) | affected All versions < V4.1.4 |
| Siemens / SCALANCE X307-2 EEC (2x 24V) | affected All versions < V4.1.4 |
| Siemens / SCALANCE X307-3 | affected All versions < V4.1.4 |
| Siemens / SCALANCE X307-3 | affected All versions < V4.1.4 |
| Siemens / SCALANCE X307-3LD | affected All versions < V4.1.4 |
| Siemens / SCALANCE X307-3LD | affected All versions < V4.1.4 |
| Siemens / SCALANCE X308-2 | affected All versions < V4.1.4 |
| Siemens / SCALANCE X308-2 | affected All versions < V4.1.4 |
| Siemens / SCALANCE X308-2LD | affected All versions < V4.1.4 |
| Siemens / SCALANCE X308-2LD | affected All versions < V4.1.4 |
| Siemens / SCALANCE X308-2LH | affected All versions < V4.1.4 |
| Siemens / SCALANCE X308-2LH | affected All versions < V4.1.4 |
| Siemens / SCALANCE X308-2LH+ | affected All versions < V4.1.4 |
| Siemens / SCALANCE X308-2LH+ | affected All versions < V4.1.4 |
| Siemens / SCALANCE X308-2M | affected All versions < V4.1.4 |
| Siemens / SCALANCE X308-2M | affected All versions < V4.1.4 |
| Siemens / SCALANCE X308-2M PoE | affected All versions < V4.1.4 |
| Siemens / SCALANCE X308-2M PoE | affected All versions < V4.1.4 |
| Siemens / SCALANCE X308-2M TS | affected All versions < V4.1.4 |
| Siemens / SCALANCE X308-2M TS | affected All versions < V4.1.4 |
| Siemens / SCALANCE X310 | affected All versions < V4.1.4 |
| Siemens / SCALANCE X310 | affected All versions < V4.1.4 |
| Siemens / SCALANCE X310FE | affected All versions < V4.1.4 |
| Siemens / SCALANCE X310FE | affected All versions < V4.1.4 |
| Siemens / SCALANCE X320-1 FE | affected All versions < V4.1.4 |
| Siemens / SCALANCE X320-1-2LD FE | affected All versions < V4.1.4 |
| Siemens / SCALANCE X408-2 | affected All versions < V4.1.4 |
| Siemens / SCALANCE XB-200 family | affected All Versions < V3.0 |
| Siemens / SCALANCE XC-200 | affected All Versions < V3.0 |
| Siemens / SCALANCE XF-200BA | affected All Versions < V3.0 |
| Siemens / SCALANCE XF201-3P IRT | affected All Versions < V5.3 |
| Siemens / SCALANCE XF202-2P IRT | affected All Versions < V5.3 |
| Siemens / SCALANCE XF204 | affected All versions < V5.2.5 |
| Siemens / SCALANCE XF204-2 | affected All versions < V5.2.5 |
| Siemens / SCALANCE XF204-2BA IRT | affected All Versions < V5.3 |
| Siemens / SCALANCE XF204IRT | affected All Versions < V5.3 |
| Siemens / SCALANCE XF206-1 | affected All versions < V5.2.5 |
| Siemens / SCALANCE XF208 | affected All versions < V5.2.5 |
| Siemens / SCALANCE XM-400 family | affected All Versions < V6.0 |
| Siemens / SCALANCE XP-200 | affected All Versions < V3.0 |
| Siemens / SCALANCE XR-300WG family | affected All Versions < V3.0 |
| Siemens / SCALANCE XR-500 family | affected All Versions < V6.0 |
| Siemens / SCALANCE XR324-12M (230V, ports on front) | affected All versions < V4.1.4 |
| Siemens / SCALANCE XR324-12M (230V, ports on front) | affected All versions < V4.1.4 |
CWE
CWE-400
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-780073.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-780073.html
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.