ICSA-17-045-03 Siemens SIMATIC Authentication Bypass (Update D)
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-2684US | critical9.0 | — | ||
Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the a… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- FixedSIMATIC IT Production Suite
Install SIMATIC Logon update (can be installed without IT Production Suite update, see compatibility note on download page) - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966 - FixedSIMATIC Logon
Update to V1.5 SP3 Update 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966 - FixedSIMATIC PCS 7
Install SIMATIC Logon update (can be installed without PCS 7 update, see compatibility note on download page) - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966 - FixedSIMATIC PDM
Install SIMATIC Logon update (can be installed without PDM update, see compatibility note on download page) - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966 - FixedSIMATIC WinCC
Install SIMATIC Logon update (can be installed without WinCC update, see compatibility note on download page) - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966 - FixedSIMATIC WinCC Runtime Professional
Install SIMATIC Logon update (can be installed without WinCC Runtime Professional update, see compatibility note on download page) - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan