ICSA-18-317-06 Siemens SIMATIC STEP 7 (TIA Portal)
view advisory published 2018-11-13
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-13811US | medium5.5 | — | ||
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions < V15.1). Password hashes with insufficient computational effort could allow an attacker to access… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-621493: Password Storage Vulnerability in SIMATIC STEP7 (TIA Portal)self
- ICS Advisory ICSA-18-317-06 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-18-317-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationSIMATIC STEP 7 (TIA Portal)
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:to trusted sources.storage to trusted users. Restrict access to project files on the engineering station and project
- FixedSIMATIC STEP 7 (TIA Portal)
Update to V15.1 - Download: https://support.industry.siemens.com/cs/us/en/view/109758794
https://support.industry.siemens.com/cs/us/en/view/109758794
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan