Uncontrolled resource consumption in Siemens SIMATIC S7-1200, SIMATIC S7-1500
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-400.
Summary
A vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All Versions < V2.6). An attacker could exhaust the available connection pool of an affected device by opening a sufficient number of connections to the device. Successful exploitation requires an attacker to be able to send packets to port 102/tcp of the affected device. No user interaction and no user privileges are required to exploit the vulnerability. The vulnerability, if exploited, could cause a Denial-of-Service condition impacting the availability of the system. At the time of advisory publication no public exploitation of this vulnerability was known.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SIMATIC S7-1200, SIMATIC S7-1500 | SIMATIC S7-1200 : All versions; SIMATIC S7-1500 : All Versions < V2.6 | — | No fix listed | CNA |
- SIMATIC S7-1200, SIMATIC S7-1500 VendorSiemens Affected SIMATIC S7-1200 : All versions; SIMATIC S7-1500 : All Versions < V2.6 Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:simatic_s7-1200_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:* | before 2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:simatic_s7-1200_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:* Versions before 2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2018-13815
- 2026-10-03 Alias added: GHSA-jwv4-wwvg-5p94
References
More Siemens Simatic S7-1200 Firmware vulnerabilities
- TI-2020-17228 Resource allocation without limits in Siemens Development/Evaluation Kits for PROFINET… CVSS 4.0HIGH 8.7
- TI-2017-09446 Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO… CVSS 4.0HIGH 8.7
- TI-2013-02428 Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of… CVSS 2.0HIGH 7.8
- TI-2013-00585 Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of… CVSS 2.0HIGH 7.8
- TI-2017-01922 Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO… CVSS 4.0HIGH 7.1
- TI-2017-01923 Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO… CVSS 4.0HIGH 7.1
Sources
- CVE-2018-13815 · CVE Program
- CVE-2018-13815 · NVD
- FIRST EPSS
- GHSA-jwv4-wwvg-5p94 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences