CVE-2017-6868: An Improper Authentication issue was discovered in Siemens SIMATIC CP 44x-1 RNA, all versions prior to 1.4.1.

Security readout for executives and security teams

This flaw affects Siemens SIMATIC CP 44x-1 RNA modules before version 1.4.1. If an attacker can reach TCP port 102 and a specific CP configuration file is stored on the RNA CPU, they may perform administrative actions without authentication. For industrial environments, that can create operational risk even without public evidence of exploitation. Exposure is most likely in industrial networks using Siemens SIMATIC CP 44x-1 RNA modules below version 1.4.1 where TCP/102 is reachable beyond tightly controlled engineering or automation segments. Internet exposure is not stated in the sources and should not be assumed without asset discovery. Treat this as a priority remediation item for sites using the affected Siemens modules. The business concern is unauthorized administrative control of industrial communication equipment, but urgency depends on whether TCP/102 is reachable and whether the documented configuration condition exists. Mitigation focus: Upgrade affected modules to version 1.4.1 or later following Siemens guidance.; Restrict TCP/102 access to trusted industrial management paths only.; Segment RNA modules from enterprise and untrusted networks..

Prepared

Jun 12, 2026, 22:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.