CVE-2021-37205

Published: Feb 9, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD (Secondary)

Description

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 < V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 < V2.9.4), SIMATIC S7-1500 Software Controller (All versions >= V21.9 < V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packets over port 102/tcp. A restart of the affected device is needed to restore normal operations.

Affected (49)

Siemens

48 products

Simatic Drive Controller Cpu 1504d Tf Firmware

Simatic Drive Controller Cpu 1507d Tf Firmware

Simatic Et 200sp Open Controller Cpu 1515sp Pc2 Firmware

Simatic S7 Plcsim Advanced Firmware

Tim 1531 Irc Firmware

Simatic S7 1500 Software Controller

Simatic S7 1200 Cpu 1211c Firmware

Simatic S7 1200 Cpu 1212c Firmware

Simatic S7 1200 Cpu 1212fc Firmware

Simatic S7 1200 Cpu 1214fc Firmware

Simatic S7 1200 Cpu 1214c Firmware

Simatic S7 1200 Cpu 1215fc Firmware

Simatic S7 1200 Cpu 1215c Firmware

Simatic S7 1200 Cpu 1217c Firmware

Simatic S7 1500 Cpu 1510sp 1 Firmware

Simatic S7 1500 Cpu 1510sp Firmware

Simatic S7 1500 Cpu 1511 1 Firmware

Simatic S7 1500 Cpu 1511c 1 Firmware

Simatic S7 1500 Cpu 1511f 1 Firmware

Simatic S7 1500 Cpu 1511t 1 Firmware

Simatic S7 1500 Cpu 1511tf 1 Firmware

Simatic S7 1500 Cpu 1512c 1 Firmware

Simatic S7 1500 Cpu 1512sp 1 Firmware

Simatic S7 1500 Cpu 1512spf 1 Firmware

Simatic S7 1500 Cpu 1513 1 Firmware

Simatic S7 1500 Cpu 1513f 1 Firmware

Simatic S7 1500 Cpu 1513r 1 Firmware

Simatic S7 1500 Cpu Cpu 1513prof 2 Firmware

Simatic S7 1500 Cpu Cpu 1513pro 2 Firmware

Simatic S7 1500 Cpu 1515 2 Firmware

Simatic S7 1500 Cpu 1515f 2 Firmware

Simatic S7 1500 Cpu 1515r 2 Firmware

Simatic S7 1500 Cpu 1515t 2 Firmware

Simatic S7 1500 Cpu 1515tf 2 Firmware

Simatic S7 1500 Cpu 1516pro F Firmware

Simatic S7 1500 Cpu 1516pro 2 Firmware

Simatic S7 1500 Cpu 1516 3 Firmware

Simatic S7 1500 Cpu 1516f 3 Firmware

Simatic S7 1500 Cpu 1516t 3 Firmware

Simatic S7 1500 Cpu 1516tf 3 Firmware

Simatic S7 1500 Cpu 1517 3 Firmware

Simatic S7 1500 Cpu 1517f 3 Firmware

Simatic S7 1500 Cpu 1517tf 3 Firmware

Simatic S7 1500 Cpu 1518 4 Firmware

Simatic S7 1500 Cpu 1518f 4 Firmware

Simatic S7 1500 Cpu 1518hf 4 Firmware

Simatic S7 1500 Cpu 1518t 4 Firmware

Simatic S7 1500 Cpu 1518tf 4 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Drive Controller Cpu 1504d Tf Firmware	Before 2.9.4

Running on/with	Platform Versions
Siemens Simatic Drive Controller Cpu 1504d Tf	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Drive Controller Cpu 1507d Tf Firmware	Before 2.9.4

Running on/with	Platform Versions
Siemens Simatic Drive Controller Cpu 1507d Tf	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Et 200sp Open Controller Cpu 1515sp Pc2 Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Et 200sp Open Controller Cpu 1515sp Pc2	All versions

Configuration D

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 Plcsim Advanced Firmware	Before 4.0
Siemens Simatic S7 Plcsim Advanced Firmware	Version 4.0

Running on/with	Platform Versions
Siemens Simatic S7 Plcsim Advanced	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Tim 1531 Irc Firmware	From 2.2

Running on/with	Platform Versions
Siemens Tim 1531 Irc	All versions

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Software Controller	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Cpu 1211c Firmware	From 4.5.0 to 4.5.2

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu 1211c	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Cpu 1212c Firmware	From 4.5.0 to 4.5.2

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu 1212c	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Cpu 1212fc Firmware	From 4.5.0 to 4.5.2

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu 1212fc	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Cpu 1214fc Firmware	From 4.5.0 to 4.5.2

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu 1214fc	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Cpu 1214c Firmware	From 4.5.0 to 4.5.2

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu 1214c	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Cpu 1215fc Firmware	From 4.5.0 to 4.5.2

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu 1215fc	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Cpu 1215c Firmware	From 4.5.0 to 4.5.2

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu 1215c	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Cpu 1217c Firmware	From 4.5.0 to 4.5.2

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu 1217c	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1510sp 1 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1510sp 1	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1510sp Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1510sp	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1511 1 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1511 1	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1511c 1 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1511c 1	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1511f 1 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1511f 1	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1511t 1 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1511t 1	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1511tf 1 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1511tf 1	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1512c 1 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1512c 1	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1512sp 1 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1512sp 1	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1512spf 1 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1512spf 1	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1513 1 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1513 1	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1513f 1 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1513f 1	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1513r 1 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1513r 1	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu Cpu 1513prof 2 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu Cpu 1513prof 2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu Cpu 1513pro 2 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu Cpu 1513pro 2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1515 2 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1515 2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1515f 2 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1515f 2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1515r 2 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1515r 2	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1515t 2 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1515t 2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1515tf 2 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1515tf 2	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1516pro F Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1516pro F	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1516pro 2 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1516pro 2	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1516 3 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1516 3	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1516f 3 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1516f 3	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1516t 3 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1516t 3	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1516tf 3 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1516tf 3	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1517 3 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1517 3	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1517f 3 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1517f 3	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1517tf 3 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1517tf 3	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1518 4 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1518 4	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1518f 4 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1518f 4	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1518hf 4 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1518hf 4	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1518t 4 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1518t 4	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1518tf 4 Firmware	From 2.9.2 to 2.9.4

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1518tf 4	All versions

Related CWEs

CWE-401

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (2)

https://cert-portal.siemens.com/productcert/pdf/ssa-838121.pdf

Source: productcert@siemens.com

PatchVendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-838121.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.