ICSA-18-345-02 Siemens SINUMERIK Controllers (Update A)
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-11466US | critical9.8 | — | ||
A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl… | ||||
| CVE-2018-11465US | high7.8 | — | ||
A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl… | ||||
| CVE-2018-11464US | low3.7 | — | ||
A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions… | ||||
| CVE-2018-11463US | high7.8 | — | ||
A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl… | ||||
| CVE-2018-11462US | critical9.8 | — | ||
A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl… | ||||
| CVE-2018-11461US | medium6.6 | — | ||
A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl… | ||||
| CVE-2018-11460US | high7.8 | — | ||
A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl… | ||||
| CVE-2018-11459US | high7.8 | — | ||
A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl… | ||||
| CVE-2018-11458US | high8.1 | — | ||
A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions… | ||||
| CVE-2018-11457US | high8.1 | — | ||
A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions… | ||||
references
External citations — patches, advisories, analysis.
remediations (50)
- MitigationSINUMERIK 808D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 808D V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 828D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 828D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 828D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 828D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 828D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 828D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 828D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 828D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 828D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 828D V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.7
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl V4.8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall on port X130privilege approach Apply Defense-in-Depth
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan