Siemens PROFINET-IO Stack (Update B) (ICSA-20-042-04)

August 11, 2020

CISA has updated this advisory with additional details on the affected products. Read the advisory at CISA.

March 10, 2020

CISA has updated this advisory with additional details on the affected products. Read the advisory at CISA.

February 13, 2020

CISA has published an advisory on an uncontrolled resource consumption vulnerability in Siemens PROFINET-IO Stack. Multiple products and versions of these products are affected. Successful exploitation of this vulnerability could lead to a denial-of-service condition. Siemens has released updates for several affected products and recommends users update to the new version. Siemens is preparing further updates and recommends specific countermeasures until patches are available. CISA also recommends a series of measures to mitigate the vulnerabilities. Read the advisory at CISA.