Multiple Vulnerabilities in SIMATIC RF160B before V2.2

Act Now9.8SSA-770721Mar 12, 2024

Attack VectorNetwork

Auth RequiredNone

ComplexityLow

User InteractionNone needed

Summary

SIMATIC RF160B contains multiple vulnerabilities including buffer overflows (CWE-119, CWE-125), improper input validation (CWE-20), weak cryptography (CWE-326, CWE-330), missing authentication (CWE-287, CWE-863), and broken access controls (CWE-732, CWE-862, CWE-863). These flaws allow an attacker with network access to execute arbitrary code within a privileged process context without authentication. The vulnerabilities span unsafe memory operations, inadequate input handling, weak encryption practices, and permission/authorization bypass mechanisms.

What this means

What could happen

An attacker with network access to the RF160B could run arbitrary code with system privileges, potentially allowing them to modify or intercept RFID reader operations, alter or forge access control data, or disrupt identification and authorization functions in controlled facilities.

Who's at risk

Manufacturing facilities, warehouses, logistics centers, and access control systems that rely on the SIMATIC RF160B RFID reader module. This includes any production line or material handling system using RF160B for identification, inventory tracking, or entry authorization. Facilities in automotive, pharma, food/beverage, and general manufacturing should prioritize this update.

How it could be exploited

An attacker on the network sends a specially crafted packet to the RF160B device exploiting one of the multiple vulnerabilities (buffer overflow, improper input validation, weak cryptography, or missing authentication checks). The device processes the packet without proper validation and executes the attacker's code in a privileged context.

Prerequisites

Network access to the RF160B device
No authentication required

remotely exploitableno authentication requiredlow complexityactively exploitedcritically high CVSS (9.8)EPSS score 62.7% (high exploit probability)

Exploitability

Actively exploited — confirmed by CISA KEV

Affected products (1)

ProductAffected VersionsFix Status

SIMATIC RF160B (6GT2003-0FA00)<V2.22.2

Remediation & Mitigation

0/1

Do now

0/1

HOTFIXUpdate SIMATIC RF160B firmware to version 2.2 or later

CVEs (157)

CVE-2017-14491 CVE-2017-18509 CVE-2020-0338 CVE-2020-0417 CVE-2020-10768 CVE-2020-11301 CVE-2020-14305 CVE-2020-14381 CVE-2020-15436 CVE-2020-24587 CVE-2020-25705 CVE-2020-26555 CVE-2020-26558 CVE-2020-29660 CVE-2020-29661 CVE-2021-0302 CVE-2021-0305 CVE-2021-0325 CVE-2021-0326 CVE-2021-0327 CVE-2021-0328 CVE-2021-0329 CVE-2021-0330 CVE-2021-0331 CVE-2021-0333 CVE-2021-0334 CVE-2021-0336 CVE-2021-0337 CVE-2021-0339 CVE-2021-0341 CVE-2021-0390 CVE-2021-0391 CVE-2021-0392 CVE-2021-0393 CVE-2021-0394 CVE-2021-0396 CVE-2021-0397 CVE-2021-0399 CVE-2021-0400 CVE-2021-0429 CVE-2021-0431 CVE-2021-0433 CVE-2021-0434 CVE-2021-0435 CVE-2021-0436 CVE-2021-0437 CVE-2021-0438 CVE-2021-0443 CVE-2021-0444 CVE-2021-0471 CVE-2021-0473 CVE-2021-0474 CVE-2021-0476 CVE-2021-0478 CVE-2021-0480 CVE-2021-0481 CVE-2021-0484 CVE-2021-0506 CVE-2021-0507 CVE-2021-0508 CVE-2021-0509 CVE-2021-0510 CVE-2021-0511 CVE-2021-0512 CVE-2021-0513 CVE-2021-0514 CVE-2021-0515 CVE-2021-0516 CVE-2021-0519 CVE-2021-0520 CVE-2021-0521 CVE-2021-0522 CVE-2021-0584 CVE-2021-0585 CVE-2021-0586 CVE-2021-0587 CVE-2021-0588 CVE-2021-0589 CVE-2021-0591 CVE-2021-0593 CVE-2021-0594 CVE-2021-0596 CVE-2021-0597 CVE-2021-0598 CVE-2021-0599 CVE-2021-0600 CVE-2021-0601 CVE-2021-0604 CVE-2021-0640 CVE-2021-0641 CVE-2021-0642 CVE-2021-0646 CVE-2021-0650 CVE-2021-0651 CVE-2021-0652 CVE-2021-0653 CVE-2021-0682 CVE-2021-0683 CVE-2021-0684 CVE-2021-0687 CVE-2021-0688 CVE-2021-0689 CVE-2021-0690 CVE-2021-0692 CVE-2021-0695 CVE-2021-0704 CVE-2021-0706 CVE-2021-0708 CVE-2021-0870 CVE-2021-0919 CVE-2021-0920 CVE-2021-0926 CVE-2021-0928 CVE-2021-0929 CVE-2021-0930 CVE-2021-0931 CVE-2021-0933 CVE-2021-0952 CVE-2021-0953 CVE-2021-0961 CVE-2021-0963 CVE-2021-0964 CVE-2021-0965 CVE-2021-0967 CVE-2021-0968 CVE-2021-0970 CVE-2021-1972 CVE-2021-1976 CVE-2021-29647 CVE-2021-33909 CVE-2021-38204 CVE-2021-39621 CVE-2021-39623 CVE-2021-39626 CVE-2021-39627 CVE-2021-39629 CVE-2021-39633 CVE-2021-39634 CVE-2022-20127 CVE-2022-20130 CVE-2022-20227 CVE-2022-20229 CVE-2022-20355 CVE-2022-20411 CVE-2022-20421 CVE-2022-20422 CVE-2022-20423 CVE-2022-20462 CVE-2022-20466 CVE-2022-20468 CVE-2022-20469 CVE-2022-20472 CVE-2022-20473 CVE-2022-20476 CVE-2022-20483 CVE-2022-20498 CVE-2022-20500

View full Siemens ProductCERT advisory

↑↓ Navigate · Esc Close

API: /api/v1/advisories/de4a43fe-1fd1-4e7a-8e08-56b5498704b4