Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2020-28400: Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets ...

CVE-2020-28400 · published 5 years ago

Summary

Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.

What to do

Update siemens ek-ertec_200p_evaluation_kit_firmware to version 4.7 or later.
Update siemens ruggedcom_rm1224_firmware to version 6.4 or later.
Update siemens scalance_m-800_firmware to version 6.4 or later.
Update siemens scalance_s615_firmware to version 6.4 or later.
Update siemens scalance_x200-4_p_irt_firmware to version 5.5.0 or later.
Update siemens scalance_x201-3p_irt_firmware to version 5.5.0 or later.
Update siemens scalance_x201-3p_irt_pro_firmware to version 5.5.0 or later.
Update siemens scalance_x202-2_irt_firmware to version 5.5.0 or later.
Update siemens scalance_x202-2p_irt_pro_firmware to version 5.5.0 or later.
Update siemens scalance_x204_irt_firmware to version 5.5.0 or later.
Update siemens scalance_x204_irt_pro_firmware to version 5.5.0 or later.
Update siemens scalance_x204-2_firmware to version 5.2.5 or later.
Update siemens scalance_x204-2fm_firmware to version 5.2.5 or later.
Update siemens scalance_x204-2ld_firmware to version 5.2.5 or later.
Update siemens scalance_x204-2ld_ts_firmware to version 5.2.5 or later.
Update siemens scalance_x204-2ts_firmware to version 5.2.5 or later.
Update siemens scalance_x206-1_firmware to version 5.2.5 or later.
Update siemens scalance_x206-1ld_firmware to version 5.2.5 or later.
Update siemens scalance_x208_firmware to version 5.2.5 or later.
Update siemens scalance_x208pro_firmware to version 5.2.5 or later.
Update siemens scalance_x212-2_firmware to version 5.2.5 or later.
Update siemens scalance_x212-2ld_firmware to version 5.2.5 or later.
Update siemens scalance_x216_firmware to version 5.2.5 or later.
Update siemens scalance_x224_firmware to version 5.2.5 or later.
Update siemens scalance_xb-200_firmware to version 4.3 or later.
Update siemens scalance_xc-200_firmware to version 4.3 or later.
Update siemens scalance_xf201-3p_irt_firmware to version 5.5.0 or later.
Update siemens scalance_xf202-2p_irt_firmware to version 5.5.0 or later.
Update siemens scalance_xf204_firmware to version 5.2.5 or later.
Update siemens scalance_xf204_irt_firmware to version 5.5.0 or later.
Update siemens scalance_xf204-2_firmware to version 5.2.5 or later.
Update siemens scalance_xf204-2ba_irt_firmware to version 5.5.0 or later.
Update siemens scalance_xf206-1_firmware to version 5.2.5 or later.
Update siemens scalance_xf208_firmware to version 5.2.5 or later.
Update siemens scalance_xf-200ba_firmware to version 4.3 or later.
Update siemens scalance_xm400_firmware to version 6.3.1 or later.
Update siemens scalance_xp-200_firmware to version 4.3 or later.
Update siemens scalance_xr500_firmware to version 6.3.1 or later.
Update siemens scalance_xr-300wg_firmware to version 4.3 or later.
Update siemens simatic_mv500_firmware to version 3.0 or later.
Update siemens simatic_profinet_driver_firmware to version 2.3 or later.
Update siemens simatic_s7-1200_firmware to version 4.5 or later.
Update siemens simocode_prov_ethernet\/ip_firmware to version 1.1.3 or later.
Update siemens simocode_prov_profinet_firmware to version 2.1.3 or later.

Affected software

Vendor	Product	Affected versions
siemens	dk_standard_ethernet_controller_evaluation_kit_firmware	All versions `cpe:2.3:o:siemens:dk_standard_ethernet_controller_evaluation_kit_firmware::::::::`
siemens	ek-ertec_200_evaulation_kit_firmware	All versions `cpe:2.3:o:siemens:ek-ertec_200_evaulation_kit_firmware::::::::`
siemens	ek-ertec_200p_evaluation_kit_firmware	< 4.7 `cpe:2.3:o:siemens:ek-ertec_200p_evaluation_kit_firmware::::::::`
siemens	ruggedcom_rm1224_firmware	< 6.4 `cpe:2.3:o:siemens:ruggedcom_rm1224_firmware::::::::`
siemens	scalance_m-800_firmware	< 6.4 `cpe:2.3:o:siemens:scalance_m-800_firmware::::::::`
siemens	scalance_s615_firmware	< 6.4 `cpe:2.3:o:siemens:scalance_s615_firmware::::::::`
siemens	scalance_w700_firmware	All versions `cpe:2.3:o:siemens:scalance_w700_firmware::::::::`
siemens	scalance_w1700_firmware	All versions `cpe:2.3:o:siemens:scalance_w1700_firmware::::::::`
siemens	scalance_x200-4_p_irt_firmware	< 5.5.0 `cpe:2.3:o:siemens:scalance_x200-4_p_irt_firmware::::::::`
siemens	scalance_x201-3p_irt_firmware	< 5.5.0 `cpe:2.3:o:siemens:scalance_x201-3p_irt_firmware::::::::`
siemens	scalance_x201-3p_irt_pro_firmware	< 5.5.0 `cpe:2.3:o:siemens:scalance_x201-3p_irt_pro_firmware::::::::`
siemens	scalance_x202-2_irt_firmware	< 5.5.0 `cpe:2.3:o:siemens:scalance_x202-2_irt_firmware::::::::`
siemens	scalance_x202-2p_irt_pro_firmware	< 5.5.0 `cpe:2.3:o:siemens:scalance_x202-2p_irt_pro_firmware::::::::`
siemens	scalance_x204_irt_firmware	< 5.5.0 `cpe:2.3:o:siemens:scalance_x204_irt_firmware::::::::`
siemens	scalance_x204_irt_pro_firmware	< 5.5.0 `cpe:2.3:o:siemens:scalance_x204_irt_pro_firmware::::::::`
siemens	scalance_x204-2_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_x204-2_firmware::::::::`
siemens	scalance_x204-2fm_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_x204-2fm_firmware::::::::`
siemens	scalance_x204-2ld_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_x204-2ld_firmware::::::::`
siemens	scalance_x204-2ld_ts_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_x204-2ld_ts_firmware::::::::`
siemens	scalance_x204-2ts_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_x204-2ts_firmware::::::::`
siemens	scalance_x206-1_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_x206-1_firmware::::::::`
siemens	scalance_x206-1ld_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_x206-1ld_firmware::::::::`
siemens	scalance_x208_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_x208_firmware::::::::`
siemens	scalance_x208pro_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_x208pro_firmware::::::::`
siemens	scalance_x212-2_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_x212-2_firmware::::::::`
siemens	scalance_x212-2ld_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_x212-2ld_firmware::::::::`
siemens	scalance_x216_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_x216_firmware::::::::`
siemens	scalance_x224_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_x224_firmware::::::::`
siemens	scalance_x302-7eec_firmware	All versions `cpe:2.3:o:siemens:scalance_x302-7eec_firmware::::::::`
siemens	scalance_x304-2fe_firmware	All versions `cpe:2.3:o:siemens:scalance_x304-2fe_firmware::::::::`
siemens	scalance_x306-1ldfe_firmware	All versions `cpe:2.3:o:siemens:scalance_x306-1ldfe_firmware::::::::`
siemens	scalance_x307-2eec_firmware	All versions `cpe:2.3:o:siemens:scalance_x307-2eec_firmware::::::::`
siemens	scalance_x307-3_firmware	All versions `cpe:2.3:o:siemens:scalance_x307-3_firmware::::::::`
siemens	scalance_x307-3ld_firmware	All versions `cpe:2.3:o:siemens:scalance_x307-3ld_firmware::::::::`
siemens	scalance_x308-2_firmware	All versions `cpe:2.3:o:siemens:scalance_x308-2_firmware::::::::`
siemens	scalance_x308-2ld_firmware	All versions `cpe:2.3:o:siemens:scalance_x308-2ld_firmware::::::::`
siemens	scalance_x308-2lh_firmware	All versions `cpe:2.3:o:siemens:scalance_x308-2lh_firmware::::::::`
siemens	scalance_x308-2lh\+_firmware	All versions `cpe:2.3:o:siemens:scalance_x308-2lh\+_firmware::::::::`
siemens	scalance_x308-2m_firmware	All versions `cpe:2.3:o:siemens:scalance_x308-2m_firmware::::::::`
siemens	scalance_x308-2m_poe_firmware	All versions `cpe:2.3:o:siemens:scalance_x308-2m_poe_firmware::::::::`
siemens	scalance_x308-2m_ts_firmware	All versions `cpe:2.3:o:siemens:scalance_x308-2m_ts_firmware::::::::`
siemens	scalance_x310_firmware	All versions `cpe:2.3:o:siemens:scalance_x310_firmware::::::::`
siemens	scalance_x310fe_firmware	All versions `cpe:2.3:o:siemens:scalance_x310fe_firmware::::::::`
siemens	scalance_x320-1fe_firmware	All versions `cpe:2.3:o:siemens:scalance_x320-1fe_firmware::::::::`
siemens	scalance_x320-3ldfe_firmware	All versions `cpe:2.3:o:siemens:scalance_x320-3ldfe_firmware::::::::`
siemens	scalance_xb-200_firmware	< 4.3 `cpe:2.3:o:siemens:scalance_xb-200_firmware::::::::`
siemens	scalance_xc-200_firmware	< 4.3 `cpe:2.3:o:siemens:scalance_xc-200_firmware::::::::`
siemens	scalance_xf201-3p_irt_firmware	< 5.5.0 `cpe:2.3:o:siemens:scalance_xf201-3p_irt_firmware::::::::`
siemens	scalance_xf202-2p_irt_firmware	< 5.5.0 `cpe:2.3:o:siemens:scalance_xf202-2p_irt_firmware::::::::`
siemens	scalance_xf204_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_xf204_firmware::::::::`

Showing 50 of 79. Show the rest

Vendor	Product	Affected versions
siemens	scalance_xf204_irt_firmware	< 5.5.0 `cpe:2.3:o:siemens:scalance_xf204_irt_firmware::::::::`
siemens	scalance_xf204-2_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_xf204-2_firmware::::::::`
siemens	scalance_xf204-2ba_irt_firmware	< 5.5.0 `cpe:2.3:o:siemens:scalance_xf204-2ba_irt_firmware::::::::`
siemens	scalance_xf206-1_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_xf206-1_firmware::::::::`
siemens	scalance_xf208_firmware	< 5.2.5 `cpe:2.3:o:siemens:scalance_xf208_firmware::::::::`
siemens	scalance_xf-200ba_firmware	< 4.3 `cpe:2.3:o:siemens:scalance_xf-200ba_firmware::::::::`
siemens	scalance_xm400_firmware	< 6.3.1 `cpe:2.3:o:siemens:scalance_xm400_firmware::::::::`
siemens	scalance_xp-200_firmware	< 4.3 `cpe:2.3:o:siemens:scalance_xp-200_firmware::::::::`
siemens	scalance_xr324-4m_eec_firmware	All versions `cpe:2.3:o:siemens:scalance_xr324-4m_eec_firmware::::::::`
siemens	scalance_xr324-4m_poe_firmware	All versions `cpe:2.3:o:siemens:scalance_xr324-4m_poe_firmware::::::::`
siemens	scalance_xr324-4m_poe_ts_firmware	All versions `cpe:2.3:o:siemens:scalance_xr324-4m_poe_ts_firmware::::::::`
siemens	scalance_xr324-12m_firmware	All versions `cpe:2.3:o:siemens:scalance_xr324-12m_firmware::::::::`
siemens	scalance_xr324-12m_ts_firmware	All versions `cpe:2.3:o:siemens:scalance_xr324-12m_ts_firmware::::::::`
siemens	scalance_xr500_firmware	< 6.3.1 `cpe:2.3:o:siemens:scalance_xr500_firmware::::::::`
siemens	scalance_xr-300wg_firmware	< 4.3 `cpe:2.3:o:siemens:scalance_xr-300wg_firmware::::::::`
siemens	simatic_cfu_pa_firmware	All versions `cpe:2.3:o:siemens:simatic_cfu_pa_firmware::::::::`
siemens	simatic_ie\/pb-link_v3_firmware	All versions `cpe:2.3:o:siemens:simatic_ie\/pb-link_v3_firmware::::::::`
siemens	simatic_mv500_firmware	< 3.0 `cpe:2.3:o:siemens:simatic_mv500_firmware::::::::`
siemens	simatic_net_cm_1542-1_firmware	All versions `cpe:2.3:o:siemens:simatic_net_cm_1542-1_firmware::::::::`
siemens	simatic_net_cp1616_firmware	<= 2.7 `cpe:2.3:o:siemens:simatic_net_cp1616_firmware::::::::`
siemens	simatic_net_cp1604_firmware	<= 2.7 `cpe:2.3:o:siemens:simatic_net_cp1604_firmware::::::::`
siemens	simatic_net_cp1626_firmware	All versions `cpe:2.3:o:siemens:simatic_net_cp1626_firmware::::::::`
siemens	simatic_net_dk-16xx_pn_io	<= 2.7 `cpe:2.3:a:siemens:simatic_net_dk-16xx_pn_io::::::::`
siemens	simatic_power_line_booster_plb_firmware	All versions `cpe:2.3:o:siemens:simatic_power_line_booster_plb_firmware::::::::`
siemens	simatic_profinet_driver_firmware	< 2.3 `cpe:2.3:o:siemens:simatic_profinet_driver_firmware::::::::`
siemens	simatic_s7-1200_firmware	< 4.5 `cpe:2.3:o:siemens:simatic_s7-1200_firmware::::::::`
siemens	simocode_prov_ethernet\/ip_firmware	< 1.1.3 `cpe:2.3:o:siemens:simocode_prov_ethernet\/ip_firmware::::::::`
siemens	simocode_prov_profinet_firmware	< 2.1.3 `cpe:2.3:o:siemens:simocode_prov_profinet_firmware::::::::`
siemens	softnet-ie_pnio_firmware	All versions `cpe:2.3:o:siemens:softnet-ie_pnio_firmware::::::::`

Original advisory text

References

https://cert-portal.siemens.com/productcert/html/ssa-599968.html
https://cert-portal.siemens.com/productcert/pdf/ssa-599968.pdf Patch Vendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-194-03 Third Party Advisory US Government Resource

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker partial control

Severity

8.7 High

Exploitation

2% chance of attack within 30 days

Type

CWE-770Allocation of Resources Without Limits

Timeline

Published13 Jul 2021

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2020-28400 · NVD

Track software like this

Free during beta