Description
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle long file names correctly. This could allow an attacker to create a buffer overflow and create a denial of service condition for the device.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
E
Physical
RL
O
RC
Changed
Affected products
- Siemens / SIMATIC PC-Station PlusAll versions – All versions
- Siemens / SIMATIC S7-400 CPU 412-2 PN V7All versions – All versions
- Siemens / SIMATIC S7-400 CPU 414-3 PN/DP V7All versions – All versions
- Siemens / SIMATIC S7-400 CPU 414F-3 PN/DP V7All versions – All versions
- Siemens / SIMATIC S7-400 CPU 416-3 PN/DP V7All versions – All versions
- Siemens / SIMATIC S7-400 CPU 416F-3 PN/DP V7All versions – All versions
- Siemens / SINAMICS S120 (incl. SIPLUS variants)All versions < V5.2 SP3 HF15 – All versions < V5.2 SP3 HF15
- Siemens / SIPLUS S7-400 CPU 414-3 PN/DP V7All versions – All versions
- Siemens / SIPLUS S7-400 CPU 416-3 PN/DP V7All versions – All versions