CNVD-2022-87983

Vulnerability from cnvd - Published: 2022-12-16
VLAI
Title
Siemens Industrial产品拒绝服务漏洞(CNVD-2022-87983)
Description
SIMATIC Drive Controllers用于生产机器的自动化,结合了SIMATIC S7-1500 CPU和SINAMICS S120驱动控制的功能。SIMATIC ET 200SP Open Controller是SIMATIC S7-1500控制器的基于PC的版本,包括可选的可视化功能以及紧凑型设备中的中央I/O。SIMATIC S7-1200 CPU产品专为工业环境中的离散和连续控制而设计,如全球制造业、食品和饮料以及化工行业。SIMATIC S7-1500 CPU产品专为全球制造、食品和饮料以及化工等工业环境中的离散和连续控制而设计。SIMATIC S7-1500 Software Controller是用于基于PC的自动化解决方案的SIMATIC软件控制器。SIMATIC S7-PLCSIM Advanced模拟S7-1200、S7-1500和其他一些PLC衍生产品。包括模拟PLC的完全网络访问,即使在虚拟化环境中也是如此。SIPLUS extreme产品设计用于在极端条件下可靠运行,基于SIMATIC,LOGO!,SITOP,SINAMICS,SIMOTION,SCALANCE或其他设备。SIPLUS设备使用与其所基于的产品相同的固件。TIM 1531 IRC是SIMATIC S7-1500、S7-400、S7-300与SINAUT ST7、DNP3和IEC 60870-5-101/104的通信模块,具有三个RJ45接口,用于通过基于IP的网络(WAN/LAN)进行通信,以及一个RS 232/RS 485接口,用于经经典WAN网络进行通信。 Siemens Industrial产品存在拒绝服务漏洞,该漏洞是由于受影响的设备无法正确处理发送到端口102/tcp的某些特制数据包,攻击者可利用该漏洞在设备中拒绝服务。
Severity
Patch Name
Siemens Industrial产品拒绝服务漏洞(CNVD-2022-87983)的补丁
Patch Description
SIMATIC Drive Controllers用于生产机器的自动化,结合了SIMATIC S7-1500 CPU和SINAMICS S120驱动控制的功能。SIMATIC ET 200SP Open Controller是SIMATIC S7-1500控制器的基于PC的版本,包括可选的可视化功能以及紧凑型设备中的中央I/O。SIMATIC S7-1200 CPU产品专为工业环境中的离散和连续控制而设计,如全球制造业、食品和饮料以及化工行业。SIMATIC S7-1500 CPU产品专为全球制造、食品和饮料以及化工等工业环境中的离散和连续控制而设计。SIMATIC S7-1500 Software Controller是用于基于PC的自动化解决方案的SIMATIC软件控制器。SIMATIC S7-PLCSIM Advanced模拟S7-1200、S7-1500和其他一些PLC衍生产品。包括模拟PLC的完全网络访问,即使在虚拟化环境中也是如此。SIPLUS extreme产品设计用于在极端条件下可靠运行,基于SIMATIC,LOGO!,SITOP,SINAMICS,SIMOTION,SCALANCE或其他设备。SIPLUS设备使用与其所基于的产品相同的固件。TIM 1531 IRC是SIMATIC S7-1500、S7-400、S7-300与SINAUT ST7、DNP3和IEC 60870-5-101/104的通信模块,具有三个RJ45接口,用于通过基于IP的网络(WAN/LAN)进行通信,以及一个RS 232/RS 485接口,用于经经典WAN网络进行通信。 Siemens Industrial产品存在拒绝服务漏洞,该漏洞是由于受影响的设备无法正确处理发送到端口102/tcp的某些特制数据包,攻击者可利用该漏洞在设备中拒绝服务。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。
Formal description

用户可参考如下供应商提供的安全公告获得补丁信息: https://cert-portal.siemens.com/productcert/html/ssa-382653.html

Reference
https://cert-portal.siemens.com/productcert/html/ssa-382653.html
Impacted products
Name
['Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)', 'Siemens SIMATIC Drive Controller family < V3.0.1']
Show details on source website

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-44694"
    }
  },
  "description": "SIMATIC Drive Controllers\u7528\u4e8e\u751f\u4ea7\u673a\u5668\u7684\u81ea\u52a8\u5316\uff0c\u7ed3\u5408\u4e86SIMATIC S7-1500 CPU\u548cSINAMICS S120\u9a71\u52a8\u63a7\u5236\u7684\u529f\u80fd\u3002SIMATIC ET 200SP Open Controller\u662fSIMATIC S7-1500\u63a7\u5236\u5668\u7684\u57fa\u4e8ePC\u7684\u7248\u672c\uff0c\u5305\u62ec\u53ef\u9009\u7684\u53ef\u89c6\u5316\u529f\u80fd\u4ee5\u53ca\u7d27\u51d1\u578b\u8bbe\u5907\u4e2d\u7684\u4e2d\u592eI/O\u3002SIMATIC S7-1200 CPU\u4ea7\u54c1\u4e13\u4e3a\u5de5\u4e1a\u73af\u5883\u4e2d\u7684\u79bb\u6563\u548c\u8fde\u7eed\u63a7\u5236\u800c\u8bbe\u8ba1\uff0c\u5982\u5168\u7403\u5236\u9020\u4e1a\u3001\u98df\u54c1\u548c\u996e\u6599\u4ee5\u53ca\u5316\u5de5\u884c\u4e1a\u3002SIMATIC S7-1500 CPU\u4ea7\u54c1\u4e13\u4e3a\u5168\u7403\u5236\u9020\u3001\u98df\u54c1\u548c\u996e\u6599\u4ee5\u53ca\u5316\u5de5\u7b49\u5de5\u4e1a\u73af\u5883\u4e2d\u7684\u79bb\u6563\u548c\u8fde\u7eed\u63a7\u5236\u800c\u8bbe\u8ba1\u3002SIMATIC S7-1500 Software Controller\u662f\u7528\u4e8e\u57fa\u4e8ePC\u7684\u81ea\u52a8\u5316\u89e3\u51b3\u65b9\u6848\u7684SIMATIC\u8f6f\u4ef6\u63a7\u5236\u5668\u3002SIMATIC S7-PLCSIM Advanced\u6a21\u62dfS7-1200\u3001S7-1500\u548c\u5176\u4ed6\u4e00\u4e9bPLC\u884d\u751f\u4ea7\u54c1\u3002\u5305\u62ec\u6a21\u62dfPLC\u7684\u5b8c\u5168\u7f51\u7edc\u8bbf\u95ee\uff0c\u5373\u4f7f\u5728\u865a\u62df\u5316\u73af\u5883\u4e2d\u4e5f\u662f\u5982\u6b64\u3002SIPLUS extreme\u4ea7\u54c1\u8bbe\u8ba1\u7528\u4e8e\u5728\u6781\u7aef\u6761\u4ef6\u4e0b\u53ef\u9760\u8fd0\u884c\uff0c\u57fa\u4e8eSIMATIC,LOGO!,SITOP,SINAMICS,SIMOTION,SCALANCE\u6216\u5176\u4ed6\u8bbe\u5907\u3002SIPLUS\u8bbe\u5907\u4f7f\u7528\u4e0e\u5176\u6240\u57fa\u4e8e\u7684\u4ea7\u54c1\u76f8\u540c\u7684\u56fa\u4ef6\u3002TIM 1531 IRC\u662fSIMATIC S7-1500\u3001S7-400\u3001S7-300\u4e0eSINAUT ST7\u3001DNP3\u548cIEC 60870-5-101/104\u7684\u901a\u4fe1\u6a21\u5757\uff0c\u5177\u6709\u4e09\u4e2aRJ45\u63a5\u53e3\uff0c\u7528\u4e8e\u901a\u8fc7\u57fa\u4e8eIP\u7684\u7f51\u7edc\uff08WAN/LAN\uff09\u8fdb\u884c\u901a\u4fe1\uff0c\u4ee5\u53ca\u4e00\u4e2aRS 232/RS 485\u63a5\u53e3\uff0c\u7528\u4e8e\u7ecf\u7ecf\u5178WAN\u7f51\u7edc\u8fdb\u884c\u901a\u4fe1\u3002\n\nSiemens Industrial\u4ea7\u54c1\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u65e0\u6cd5\u6b63\u786e\u5904\u7406\u53d1\u9001\u5230\u7aef\u53e3102/tcp\u7684\u67d0\u4e9b\u7279\u5236\u6570\u636e\u5305\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u8bbe\u5907\u4e2d\u62d2\u7edd\u670d\u52a1\u3002",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/html/ssa-382653.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-87983",
  "openTime": "2022-12-16",
  "patchDescription": "SIMATIC Drive Controllers\u7528\u4e8e\u751f\u4ea7\u673a\u5668\u7684\u81ea\u52a8\u5316\uff0c\u7ed3\u5408\u4e86SIMATIC S7-1500 CPU\u548cSINAMICS S120\u9a71\u52a8\u63a7\u5236\u7684\u529f\u80fd\u3002SIMATIC ET 200SP Open Controller\u662fSIMATIC S7-1500\u63a7\u5236\u5668\u7684\u57fa\u4e8ePC\u7684\u7248\u672c\uff0c\u5305\u62ec\u53ef\u9009\u7684\u53ef\u89c6\u5316\u529f\u80fd\u4ee5\u53ca\u7d27\u51d1\u578b\u8bbe\u5907\u4e2d\u7684\u4e2d\u592eI/O\u3002SIMATIC S7-1200 CPU\u4ea7\u54c1\u4e13\u4e3a\u5de5\u4e1a\u73af\u5883\u4e2d\u7684\u79bb\u6563\u548c\u8fde\u7eed\u63a7\u5236\u800c\u8bbe\u8ba1\uff0c\u5982\u5168\u7403\u5236\u9020\u4e1a\u3001\u98df\u54c1\u548c\u996e\u6599\u4ee5\u53ca\u5316\u5de5\u884c\u4e1a\u3002SIMATIC S7-1500 CPU\u4ea7\u54c1\u4e13\u4e3a\u5168\u7403\u5236\u9020\u3001\u98df\u54c1\u548c\u996e\u6599\u4ee5\u53ca\u5316\u5de5\u7b49\u5de5\u4e1a\u73af\u5883\u4e2d\u7684\u79bb\u6563\u548c\u8fde\u7eed\u63a7\u5236\u800c\u8bbe\u8ba1\u3002SIMATIC S7-1500 Software Controller\u662f\u7528\u4e8e\u57fa\u4e8ePC\u7684\u81ea\u52a8\u5316\u89e3\u51b3\u65b9\u6848\u7684SIMATIC\u8f6f\u4ef6\u63a7\u5236\u5668\u3002SIMATIC S7-PLCSIM Advanced\u6a21\u62dfS7-1200\u3001S7-1500\u548c\u5176\u4ed6\u4e00\u4e9bPLC\u884d\u751f\u4ea7\u54c1\u3002\u5305\u62ec\u6a21\u62dfPLC\u7684\u5b8c\u5168\u7f51\u7edc\u8bbf\u95ee\uff0c\u5373\u4f7f\u5728\u865a\u62df\u5316\u73af\u5883\u4e2d\u4e5f\u662f\u5982\u6b64\u3002SIPLUS extreme\u4ea7\u54c1\u8bbe\u8ba1\u7528\u4e8e\u5728\u6781\u7aef\u6761\u4ef6\u4e0b\u53ef\u9760\u8fd0\u884c\uff0c\u57fa\u4e8eSIMATIC,LOGO!,SITOP,SINAMICS,SIMOTION,SCALANCE\u6216\u5176\u4ed6\u8bbe\u5907\u3002SIPLUS\u8bbe\u5907\u4f7f\u7528\u4e0e\u5176\u6240\u57fa\u4e8e\u7684\u4ea7\u54c1\u76f8\u540c\u7684\u56fa\u4ef6\u3002TIM 1531 IRC\u662fSIMATIC S7-1500\u3001S7-400\u3001S7-300\u4e0eSINAUT ST7\u3001DNP3\u548cIEC 60870-5-101/104\u7684\u901a\u4fe1\u6a21\u5757\uff0c\u5177\u6709\u4e09\u4e2aRJ45\u63a5\u53e3\uff0c\u7528\u4e8e\u901a\u8fc7\u57fa\u4e8eIP\u7684\u7f51\u7edc\uff08WAN/LAN\uff09\u8fdb\u884c\u901a\u4fe1\uff0c\u4ee5\u53ca\u4e00\u4e2aRS 232/RS 485\u63a5\u53e3\uff0c\u7528\u4e8e\u7ecf\u7ecf\u5178WAN\u7f51\u7edc\u8fdb\u884c\u901a\u4fe1\u3002\r\n\r\nSiemens Industrial\u4ea7\u54c1\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u65e0\u6cd5\u6b63\u786e\u5904\u7406\u53d1\u9001\u5230\u7aef\u53e3102/tcp\u7684\u67d0\u4e9b\u7279\u5236\u6570\u636e\u5305\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u8bbe\u5907\u4e2d\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens Industrial\u4ea7\u54c1\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2022-87983\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)",
      "Siemens SIMATIC Drive Controller family \u003c V3.0.1"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-382653.html",
  "serverity": "\u9ad8",
  "submitTime": "2022-12-14",
  "title": "Siemens Industrial\u4ea7\u54c1\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2022-87983\uff09"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…