ICSA-18-023-02 Siemens Industrial Products (Update A)
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-2680US | medium6.5 | — | ||
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required… | ||||
references
External citations — patches, advisories, analysis.
remediations (16)
- MitigationExtension Unit 12" PROFINET
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply cell protection concept.
- MitigationExtension Unit 15" PROFINET
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply cell protection concept.
- MitigationExtension Unit 19" PROFINET
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply cell protection concept.
- MitigationExtension Unit 22" PROFINET
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply cell protection concept.
- MitigationSIMATIC CP 1242-7 GPRS V2
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply cell protection concept.
- MitigationSIMATIC CP 1243-7 LTE/US
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply cell protection concept.
- MitigationSIMATIC CP 1243-8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply cell protection concept.
- MitigationSIMATIC CP 1626
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply cell protection concept.
- FixedExtension Unit 12" PROFINET
Update to V01.01.01 - Download: https://support.industry.siemens.com/cs/de/en/view/109750351
https://support.industry.siemens.com/cs/de/en/view/109750351 - FixedExtension Unit 15" PROFINET
Update to V01.01.01 - Download: https://support.industry.siemens.com/cs/de/en/view/109750351
https://support.industry.siemens.com/cs/de/en/view/109750351 - FixedExtension Unit 19" PROFINET
Update to V01.01.01 - Download: https://support.industry.siemens.com/cs/de/en/view/109750351
https://support.industry.siemens.com/cs/de/en/view/109750351 - FixedExtension Unit 22" PROFINET
Update to V01.01.01 - Download: https://support.industry.siemens.com/cs/de/en/view/109750351
https://support.industry.siemens.com/cs/de/en/view/109750351 - FixedSIMATIC CP 1242-7 GPRS V2
Update to V2.1.82 - Download: https://support.industry.siemens.com/cs/ww/en/view/109749515
https://support.industry.siemens.com/cs/ww/en/view/109749515 - FixedSIMATIC CP 1243-7 LTE/US
Update to V2.1.82 - Download: https://support.industry.siemens.com/cs/ww/en/view/109749515
https://support.industry.siemens.com/cs/ww/en/view/109749515 - FixedSIMATIC CP 1243-8
Update to V2.1.82 - Download: https://support.industry.siemens.com/cs/ww/en/view/109749515
https://support.industry.siemens.com/cs/ww/en/view/109749515 - FixedSIMATIC CP 1626
Update to V1.1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109763307
https://support.industry.siemens.com/cs/ww/en/view/109763307
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan