Siemens SIMATIC CP 44x-1 Redundant Network Access Modules

An attacker without credentials could remotely execute commands on the redundant network access module, potentially disrupting communication between redundant PLC systems or altering their configuration, which could cause loss of process control or failover failures in critical infrastructure.

Water utilities and electric utilities using Siemens SIMATIC redundancy control networks. The SIMATIC CP 44x-1 RNA modules are used to manage failover and redundancy between PLC systems in critical infrastructure. This affects any organization running SIMATIC automation platforms that rely on these modules for high-availability control systems.

An attacker on the network sends a malicious network packet to the SIMATIC CP 44x-1 RNA module on port 102 (or other exposed service ports). Because the module does not properly authenticate remote requests, the attacker can execute arbitrary commands or reconfigure the module without providing credentials. This could reroute traffic, poison the redundancy configuration, or inject malicious commands into the PLC network.