CVE-2024-35292

Severity Score

8.8

*CVSS v4

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

A vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All versions), SIMATIC S7-200 SMART CPU CR60 (6ES7288-1CR60-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA1) (All versions), SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA1) (All versions), SIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA1) (All versions), SIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA1) (All versions), SIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA0) (All versions), SIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA1) (All versions), SIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA0) (All versions), SIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA1) (All versions), SIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA0) (All versions), SIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA1) (All versions), SIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA0) (All versions), SIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA1) (All versions). Affected devices are using a predictable IP ID sequence number. This leaves the system susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack and eventually could allow an attacker to create a denial of service condition.

Se ha identificado una vulnerabilidad en SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (Todas las versiones), SIMATIC S7-200 SMART CPU CR60 (6ES7288-1CR60-0AA0) (Todas las versiones), SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA0) (Todas las versiones), SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA1) (Todas las versiones), SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA0) (Todas las versiones) , SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA1) (todas las versiones), SIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA0) (todas las versiones), SIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40 -0AA1) (todas las versiones), SIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA0) (todas las versiones), SIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA1) (todas las versiones), SIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA0) (Todas las versiones), SIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA1) (Todas las versiones), SIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA0) (Todas versiones), SIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA1) (todas las versiones), SIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA0) (todas las versiones), SIMATIC S7-200 SMART CPU ST40 (6ES7288 -1ST40-0AA1) (Todas las versiones), SIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA0) (Todas las versiones), SIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA1) (Todas las versiones). Los dispositivos afectados utilizan un número de secuencia de ID de IP predecible. Esto deja al sistema susceptible a una familia de ataques que se basan en el uso de números de secuencia de ID de IP predecibles como método base de ataque y, eventualmente, podrían permitir que un atacante cree una condición de denegación de servicio.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Attack Requirements

None

Privileges Required

None

User Interaction

None

System

Vulnerable | Subsequent

Confidentiality

Low

None

Integrity

None

Availability

High

None

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2024-05-15 CVE Reserved
2024-06-11 CVE Published
2024-06-12 EPSS Updated
2024-08-02 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-330: Use of Insufficiently Random Values

CAPEC

References (1)

URL	Tag	Source
https://cert-portal.siemens.com/productcert/html/ssa-481506.html

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU CR40 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU CR40"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU CR40" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU CR60 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU CR60"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU CR60" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU SR20 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU SR20"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU SR20" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU SR20 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU SR20"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU SR20" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU SR30 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU SR30"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU SR30" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU SR30 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU SR30"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU SR30" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU SR40 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU SR40"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU SR40" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU SR40 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU SR40"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU SR40" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU SR60 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU SR60"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU SR60" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU SR60 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU SR60"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU SR60" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU ST20 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU ST20"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU ST20" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU ST20 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU ST20"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU ST20" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU ST30 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU ST30"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU ST30" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU ST30 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU ST30"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU ST30" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU ST40 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU ST40"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU ST40" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU ST40 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU ST40"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU ST40" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU ST60 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU ST60"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU ST60" and version "0"		en		Affected
Siemens Search vendor "Siemens"		SIMATIC S7-200 SMART CPU ST60 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU ST60"				0 Search vendor "Siemens" for product "SIMATIC S7-200 SMART CPU ST60" and version "0"		en		Affected