Memory leak in Siemens SIMATIC Drive Controller family
Priority MEDIUM 42CWE-401Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-401.
Summary
A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 < V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 < V2.9.4), SIMATIC S7-1500 Software Controller (All versions >= V21.9 < V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packets over port 102/tcp. A restart of the affected device is needed to restore normal operations.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0164 76th percentileScored 2026-11-07
Fix Fixed SIPLUS TIM 1531 IRC (Siemens): V2.3.6TIM 1531 IRC (Siemens): V2.3.6
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SIMATIC Drive Controller family | All versions >= V2.9.2 < V2.9.4 | — | No fix listed | CNA |
| Siemens | SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) | All versions >= V21.9 < V21.9.4 | — | No fix listed | CNA |
| Siemens | SIMATIC S7-1200 CPU family (incl. SIPLUS variants) | All versions >= V4.5.0 < V4.5.2 | — | No fix listed | CNA |
| Siemens | SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) | All versions >= V2.9.2 < V2.9.4 | — | No fix listed | CNA |
| Siemens | SIMATIC S7-1500 Software Controller | All versions >= V21.9 < V21.9.4 | — | No fix listed | CNA |
| Siemens | SIMATIC S7-PLCSIM Advanced | All versions >= V4.0 < V4.0 SP1 | — | No fix listed | CNA |
| Siemens | SIPLUS TIM 1531 IRC | before V2.3.6 | V2.3.6 | Patch available | CNA |
| Siemens | TIM 1531 IRC | before V2.3.6 | V2.3.6 | Patch available | CNA |
- SIMATIC Drive Controller family VendorSiemens Affected All versions >= V2.9.2 < V2.9.4 Fixed in — No fix listed CNA
- SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) VendorSiemens Affected All versions >= V21.9 < V21.9.4 Fixed in — No fix listed CNA
- SIMATIC S7-1200 CPU family (incl. SIPLUS variants) VendorSiemens Affected All versions >= V4.5.0 < V4.5.2 Fixed in — No fix listed CNA
- SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) VendorSiemens Affected All versions >= V2.9.2 < V2.9.4 Fixed in — No fix listed CNA
- SIMATIC S7-1500 Software Controller VendorSiemens Affected All versions >= V21.9 < V21.9.4 Fixed in — No fix listed CNA
- SIMATIC S7-PLCSIM Advanced VendorSiemens Affected All versions >= V4.0 < V4.0 SP1 Fixed in — No fix listed CNA
- SIPLUS TIM 1531 IRC VendorSiemens Affected before V2.3.6 Fixed in V2.3.6 Patch available CNA
- TIM 1531 IRC VendorSiemens Affected before V2.3.6 Fixed in V2.3.6 Patch available CNA
CPE configurations NVD · 96
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:simatic_drive_controller_cpu_1504d_tf_firmware:*:*:*:*:*:*:*:* | before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_drive_controller_cpu_1504d_tf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_drive_controller_cpu_1507d_tf_firmware:*:*:*:*:*:*:*:* | before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_drive_controller_cpu_1507d_tf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-plcsim_advanced_firmware:*:*:*:*:*:*:*:* | before 4.0 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_s7-plcsim_advanced_firmware:4.0:-:*:*:*:*:*:* | 4.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-plcsim_advanced:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:* | 2.2 | Vulnerable | Siemens |
- cpe:2.3:o:siemens:simatic_drive_controller_cpu_1504d_tf_firmware:*:*:*:*:*:*:*:* Versions before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_drive_controller_cpu_1504d_tf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_drive_controller_cpu_1507d_tf_firmware:*:*:*:*:*:*:*:* Versions before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_drive_controller_cpu_1507d_tf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-plcsim_advanced_firmware:*:*:*:*:*:*:*:* Versions before 4.0 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_s7-plcsim_advanced_firmware:4.0:-:*:*:*:*:*:* Versions 4.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-plcsim_advanced:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Siemens
Show 86 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:a:siemens:simatic_s7-1500_software_controller:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1200_cpu_1211c_firmware:*:*:*:*:*:*:*:* | 4.5.0 to before 4.5.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200_cpu_1211c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1200_cpu_1212c_firmware:*:*:*:*:*:*:*:* | 4.5.0 to before 4.5.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200_cpu_1212c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1200_cpu_1212fc_firmware:*:*:*:*:*:*:*:* | 4.5.0 to before 4.5.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200_cpu_1212fc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1200_cpu_1214fc_firmware:*:*:*:*:*:*:*:* | 4.5.0 to before 4.5.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214fc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1200_cpu_1214c_firmware:*:*:*:*:*:*:*:* | 4.5.0 to before 4.5.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1200_cpu_1215fc_firmware:*:*:*:*:*:*:*:* | 4.5.0 to before 4.5.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200_cpu_1215fc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1200_cpu_1215c_firmware:*:*:*:*:*:*:*:* | 4.5.0 to before 4.5.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200_cpu_1215c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1200_cpu_1217c_firmware:*:*:*:*:*:*:*:* | 4.5.0 to before 4.5.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200_cpu_1217c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1510sp-1_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1510sp-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1510sp_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1510sp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511-1_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511c-1_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511c-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511f-1_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511f-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511t-1_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511t-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511tf-1_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511tf-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512c-1_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512c-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512sp-1_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512sp-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512spf-1_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512spf-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513-1_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513f-1_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513f-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513r-1_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513r-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_cpu_1513prof-2_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_cpu_1513prof-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_cpu_1513pro-2_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_cpu_1513pro-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515-2_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515f-2_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515f-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515r-2_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515r-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515t-2_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515t-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515tf-2_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515tf-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516pro_f_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516pro_f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516pro-2_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516pro-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516-3_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516-3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516f-3_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516f-3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516t-3_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516t-3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516tf-3_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516tf-3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517-3_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517-3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517f-3_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517f-3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517tf-3_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517tf-3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518f-4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518hf-4_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518hf-4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518t-4_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518t-4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518tf-4_firmware:*:*:*:*:*:*:*:* | 2.9.2 to before 2.9.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518tf-4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:a:siemens:simatic_s7-1500_software_controller:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1200_cpu_1211c_firmware:*:*:*:*:*:*:*:* Versions 4.5.0 to before 4.5.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200_cpu_1211c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1200_cpu_1212c_firmware:*:*:*:*:*:*:*:* Versions 4.5.0 to before 4.5.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200_cpu_1212c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1200_cpu_1212fc_firmware:*:*:*:*:*:*:*:* Versions 4.5.0 to before 4.5.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200_cpu_1212fc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1200_cpu_1214fc_firmware:*:*:*:*:*:*:*:* Versions 4.5.0 to before 4.5.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214fc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1200_cpu_1214c_firmware:*:*:*:*:*:*:*:* Versions 4.5.0 to before 4.5.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1200_cpu_1215fc_firmware:*:*:*:*:*:*:*:* Versions 4.5.0 to before 4.5.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200_cpu_1215fc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1200_cpu_1215c_firmware:*:*:*:*:*:*:*:* Versions 4.5.0 to before 4.5.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200_cpu_1215c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1200_cpu_1217c_firmware:*:*:*:*:*:*:*:* Versions 4.5.0 to before 4.5.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200_cpu_1217c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1510sp-1_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1510sp-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1510sp_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1510sp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511-1_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511c-1_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511c-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511f-1_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511f-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511t-1_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511t-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511tf-1_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511tf-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512c-1_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512c-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512sp-1_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512sp-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512spf-1_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512spf-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513-1_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513f-1_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513f-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513r-1_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513r-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_cpu_1513prof-2_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_cpu_1513prof-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_cpu_1513pro-2_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_cpu_1513pro-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515-2_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515f-2_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515f-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515r-2_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515r-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515t-2_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515t-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515tf-2_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515tf-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516pro_f_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516pro_f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516pro-2_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516pro-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516-3_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516-3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516f-3_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516f-3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516t-3_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516t-3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516tf-3_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516tf-3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517-3_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517-3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517f-3_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517f-3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517tf-3_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517tf-3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518f-4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518hf-4_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518hf-4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518t-4_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518t-4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518tf-4_firmware:*:*:*:*:*:*:*:* Versions 2.9.2 to before 2.9.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518tf-4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SIPLUS TIM 1531 IRC (Siemens) Fixed in V2.3.6
- Fix · CNA TIM 1531 IRC (Siemens) Fixed in V2.3.6
Timeline
- 2026-10-02 Threatist record created from CVE-2021-37205
- 2026-10-03 Alias added: GHSA-78f8-w6wx-97fh
References
More Siemens Simatic Drive Controller Cpu 1504d Tf Firmware vulnerabilities
- TI-2023-13337 Integer overflow in Siemens SIMATIC BRAUMAT CVSS 4.0HIGH 8.7
- TI-2021-15266 A vulnerability has been identified in SIMATIC Drive Controller family (All versions <… CVSS 3.1HIGH 7.5
- TI-2021-15247 A vulnerability has been identified in SIMATIC Drive Controller family (All versions >=… CVSS 3.1HIGH 7.5
- TI-2022-18088 Insufficiently protected credentials in Siemens SIMATIC Drive Controller family CVSS 3.1CRITICAL 9.3
- TI-2023-24796 Use after free in Siemens SIMATIC Drive Controller CPU 1504D TF CVSS 3.1HIGH 7.5
- TI-2022-18278 Affected devices do not contain an Immutable Root of Trust in Hardware. CVSS 3.1MEDIUM 6.8
Sources
- CVE-2021-37205 · CVE Program
- CVE-2021-37205 · NVD
- FIRST EPSS
- GHSA-78f8-w6wx-97fh · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences