● CVE — High
CVE-2021-37185
VendorsiemensProducttim 1531 irc firmware, simatic s7-1500 software controller, simatic et 200sp open controller cpu 1515sp pc2 firmware, simatic s7-1200 cpu 1211c firmware, simatic s7-1200 cpu 1212c firmware, simatic s7-1200 cpu 1214c firmware, simatic s7-1200 cpu 1215c firmware, simatic s7-1200 cpu 1217c firmware, simatic s7-plcsim advanced firmware, simatic drive controller cpu 1504d tf firmware, simatic drive controller cpu 1507d tf firmware, simatic s7-1200 cpu 1212fc firmware, simatic s7-1200 cpu 1214fc firmware, simatic s7-1200 cpu 1215fc firmware, simatic s7-1500 cpu 1510sp-1 firmware, simatic s7-1500 cpu 1510sp firmware, simatic s7-1500 cpu 1511-1 firmware, simatic s7-1500 cpu 1511c-1 firmware, simatic s7-1500 cpu 1511f-1 firmware, simatic s7-1500 cpu 1511t-1 firmware, simatic s7-1500 cpu 1511tf-1 firmware, simatic s7-1500 cpu 1512c-1 firmware, simatic s7-1500 cpu 1512sp-1 firmware, simatic s7-1500 cpu 1512spf-1 firmware, simatic s7-1500 cpu 1513-1 firmwareDiscoveredFeb 9, 2022UpdatedNov 21, 2024
A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 = V21.9 = V4.5.0 = V2.9.2 = V21.9 = V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packets over port 102/tcp. A restart of the affected device is needed to restore normal operations.