Siemens SIMATIC ET 200SP Communication Processors Authentication Vulnerability Allowing Unauthenticated Remote Access to Configuration Data

An authentication vulnerability has been identified in several Siemens SIMATIC ET 200SP communication processors, including SIPLUS variants. The affected models are CP 1542SP-1, CP 1542SP-1 IRC, and CP 1543SP-1, all versions prior to 2.4.24. These devices do not properly authenticate configuration connections, which could enable an unauthenticated remote attacker to access the configuration data.

Impact

Exploitation of this vulnerability could lead to unauthorized access to configuration data on the affected devices.

Remediation

Siemens has released new versions for the affected products and recommends updating to the latest versions. Additionally, access to the affected systems can be restricted to trusted IP addresses only.