QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2021-37185

Back to search

CVE-2021-37185

Published: Feb 9, 2022

Modified: Apr 18, 2025

PUBLISHED

CVSS v3.1

7.5

HIGH

Description

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 < V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 < V2.9.4), SIMATIC S7-1500 Software Controller (All versions >= V21.9 < V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packets over port 102/tcp. A restart of the affected device is needed to restore normal operations.

VendorProductVersions

Siemens

SIMATIC Drive Controller family

affected
All versions >= V2.9.2 < V2.9.4

Siemens

SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)

affected
All versions >= V21.9 < V21.9.4

Siemens

SIMATIC S7-1200 CPU family (incl. SIPLUS variants)

affected
All versions >= V4.5.0 < V4.5.2

Siemens

SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

affected
All versions >= V2.9.2 < V2.9.4

Siemens

SIMATIC S7-1500 Software Controller

affected
All versions >= V21.9 < V21.9.4

Siemens

SIMATIC S7-PLCSIM Advanced

affected
All versions >= V4.0 < V4.0 SP1

Siemens

SIPLUS TIM 1531 IRC

affected
All versions < V2.3.6

Siemens

TIM 1531 IRC

affected
All versions < V2.3.6

Weaknesses (CWE)

CWE-672

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now