ICSA-19-134-02 Siemens SIMATIC WinCC and SIMATIC PCS 7
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10922US | critical9.8OT elevated | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 and newer (All versions), SIMATIC WinCC V7.2 and earlier (All versions), SI… | ||||
references
External citations — patches, advisories, analysis.
- SSA-705517: Remote Code Execution Vulnerability in SIMATIC WinCC and SIMATIC PCS 7self
- ICS Advisory ICSA-19-134-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-19-134-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationSIMATIC PCS 7 V8.0 and earlier
Apply recommendations from Section Workarounds and Mitigations, or upgrade to a newer version and enable "Encrypted Communication"
- MitigationSIMATIC PCS 7 V8.1 and newer
Enable "Encrypted Communication"
- MitigationSIMATIC WinCC V7.2 and earlier
Apply recommendations from Section Workarounds and Mitigations, or upgrade to a newer version and enable "Encrypted Communication"
- MitigationSIMATIC WinCC V7.3 and newer
Enable "Encrypted Communication". Starting with WinCC V7.5 "Encrypted Communication" is enabled by default
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan