Siemens SINAMICS S200 Unlocked Bootloader Vulnerability Allowing Code Injection and Unauthorized Firmware Installation

A vulnerability exists in all SINAMICS S200 devices with serial numbers starting with SZVS8, SZVS9, SZVS0, or SZVSN and FS number 02. These devices have an unlocked bootloader, which allows attackers to inject malicious code or install untrusted firmware. This flaw undermines the device's security features meant to prevent data manipulation and unauthorized access.

Impact

Exploitation of this vulnerability could lead to the injection of malicious code or the installation of untrusted firmware, potentially damaging or compromising the affected device.

Remediation

Users are advised to follow general security recommendations and apply a defense-in-depth approach. For product-specific support, contact local customer service.