ICSA-18-317-07 Siemens SIMATIC IT Production Suite
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-13804US | high8.1 | — | ||
A vulnerability has been identified in SIMATIC IT LMS (All versions), SIMATIC IT Production Suite (Versions V7.1 < V7.1 Upd3), SIMATIC IT UA Discrete Manufacturing (Versions < V1.2… | ||||
references
External citations — patches, advisories, analysis.
remediations (5)
- MitigationSIMATIC IT LMS
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC IT Production Suite
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to affected installations.
- MitigationSIMATIC IT UA Discrete Manufacturing
See recommendations from section Workaround and Mitigations
- FixedSIMATIC IT Production Suite
Update to V7.1 Upd3. Contact Product Support to obtain the update. - Download: https://www.plm.automation.siemens.com/global/en/support/
https://www.plm.automation.siemens.com/global/en/support/ - FixedSIMATIC IT UA Discrete Manufacturing
Versions V2.4 The latest V2.4 release containing SIMATIC IT Administrative Tools, SIMATIC IT Basic Service, and SIMATIC IT Full Services V7.1 Upd3 is available from GTAC Download. - Download: https://download.industrysoftware.automation.siemens.com/
https://download.industrysoftware.automation.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan