SSA-918992 V1.0: Unused HTTP Service on SENTRON 3KC ATC6 Ethernet Module

SENTRON 3KC ATC6 Expansion Module Ethernet exposes an unused, unstable http service at port 80/tcp on the Modbus-TCP Ethernet, which could allow an attacker on the same Modbus network to create a denial of service condition that forces the device to reboot.

Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

attacker denial of service device ethernet expansion fix http network port reboot service siemens ssa tcp