CVE-2023-46156

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-12-12 · updated 2026-06-17
Weakness: CWE-416

Description

Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.

Affected products

Siemens Simatic Drive Controller Cpu 1504D Tf Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic Drive Controller Cpu 1507D Tf Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic Et 200Sp Open Control 1515Sp Pc2 Firmware: all versions
Siemens Simatic S7-1500 Cpu 1510Sp-1 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1510Sp F-1 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1511-1 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1511C-1 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1511F-1 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1511T-1 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1511Tf-1 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1512C-1 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1512Sp-1 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1512Sp F-1 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1513-1 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1513F-1 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1513R-1 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1514Sp-2 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1514Sp F-2 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1514Spt-2 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1514Spt F-2 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1515-2 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1515F-2 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1515R-2 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1515T-2 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1515Tf-2 Pn Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1516-3 Pn/Dp Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1516F-3 Pn/Dp Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1516T-3 Pn/Dp Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1517-3 Pn/Dp Firmware: before 3.1.0 — fixed in 3.1.0
Siemens Simatic S7-1500 Cpu 1517F-3 Pn/Dp Firmware: before 3.1.0 — fixed in 3.1.0

How to fix

Upgrade to a fixed version: Siemens Simatic Drive Controller Cpu 1504D Tf Firmware 3.1.0; Siemens Simatic Drive Controller Cpu 1507D Tf Firmware 3.1.0; Siemens Simatic S7-1500 Cpu 1510Sp-1 Pn Firmware 3.1.0; Siemens Simatic S7-1500 Cpu 1510Sp F-1 Pn Firmware 3.1.0; Siemens Simatic S7-1500 Cpu 1511-1 Pn Firmware 3.1.0; Siemens Simatic S7-1500 Cpu 1511C-1 Pn Firmware 3.1.0; Siemens Simatic S7-1500 Cpu 1511F-1 Pn Firmware 3.1.0; Siemens Simatic S7-1500 Cpu 1511T-1 Pn Firmware 3.1.0; Siemens Simatic S7-1500 Cpu 1511Tf-1 Pn Firmware 3.1.0; Siemens Simatic S7-1500 Cpu 1512C-1 Pn Firmware 3.1.0; Siemens Simatic S7-1500 Cpu 1512Sp-1 Pn Firmware 3.1.0; Siemens Simatic S7-1500 Cpu 1512Sp F-1 Pn Firmware 3.1.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-46156 or the next vulnerability affects your stack