ICSA-18-226-01 Siemens SIMATIC STEP 7 and SIMATIC WinCC (Update A)
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-11454US | high8.6OT elevated | — | ||
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13 (All… | ||||
| CVE-2018-11453US | high7.8OT elevated | — | ||
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13 (All… | ||||
references
External citations — patches, advisories, analysis.
- SSA-979106: Vulnerabilities in SIMATIC STEP 7 (TIA Portal) and SIMATIC WinCC (TIAPortal)self
- ICS Advisory ICSA-18-226-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-18-226-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (16)
- MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.
- MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.
- MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.
- MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.
- MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.
- MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.
- MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.
- MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.
- FixedSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12
Upgrade to V13 SP2 Update 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109759753
https://support.industry.siemens.com/cs/ww/en/view/109759753 - FixedSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12
Upgrade to V13 SP2 Update 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109759753
https://support.industry.siemens.com/cs/ww/en/view/109759753 - FixedSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13
Update to V13 SP2 Update 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109759753
https://support.industry.siemens.com/cs/ww/en/view/109759753 - FixedSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13
Update to V13 SP2 Update 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109759753
https://support.industry.siemens.com/cs/ww/en/view/109759753 - FixedSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14
Update to V14 SP1 Update 6 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747387
https://support.industry.siemens.com/cs/ww/en/view/109747387 - FixedSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14
Update to V14 SP1 Update 6 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747387
https://support.industry.siemens.com/cs/ww/en/view/109747387 - FixedSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15
Update to V15 Update 2 or newer - Download: https://support.industry.siemens.com/cs/ww/en/view/109755826
https://support.industry.siemens.com/cs/ww/en/view/109755826 - FixedSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15
Update to V15 Update 2 or newer - Download: https://support.industry.siemens.com/cs/ww/en/view/109755826
https://support.industry.siemens.com/cs/ww/en/view/109755826
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan