Siemens OpenSSL Affected Industrial Products

An attacker who provides a specially crafted elliptic curve certificate to a vulnerable Siemens device can cause it to become unresponsive, denying access to the device and potentially disrupting process control, data communication, or management functions. Devices affected include industrial switches, routers, PLCs, and HMI systems across water, electric, and manufacturing operations.

This vulnerability affects operators and maintainers of Siemens industrial automation systems across manufacturing, transportation, utilities, and process industries. Specifically impacted are: (1) Industrial switches and routers (SCALANCE X, M, W, XR, XM, XC, XB, XF, XP series; RUGGEDCOM RM, ROX, RX series) that manage plant network traffic; (2) Programmable logic controllers (SIMATIC S7-1200, S7-1500 families, ET 200SP, ET 200pro) that control industrial processes; (3) Communication modules and network cards (CP series) used for remote access and data transfer; (4) HMI and engineering workstations (TIA Portal, WinCC, SIMOTION, SINAMICS software) used to configure and monitor systems; (5) Specialized connectors (Industrial Edge OPC UA Connector, SIMATIC Cloud Connect) for connectivity and data integration. All sectors relying on Siemens automation are at risk, particularly water authorities and electric utilities that depend on these devices for supervisory control and process monitoring.

An attacker could send a malicious certificate to a Siemens device over the network (via TLS/SSL connection or OPC UA protocol). The vulnerable OpenSSL library processes the crafted elliptic curve parameters and enters an infinite loop, consuming CPU resources and causing the device to become unresponsive. No authentication is required for this attack.