ICSA-19-192-02 Siemens SIMATIC WinCC and PCS7 (Update C)
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10935US | high7.2 | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versi… | ||||
references
External citations — patches, advisories, analysis.
- SSA-121293: Code Upload Vulnerability in SIMATIC WinCC and SIMATIC PCS 7self
- ICS Advisory ICSA-19-192-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-19-192-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (24)
- MitigationSIMATIC PCS 7 V8.0 and earlier
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC PCS 7 V8.1
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC PCS 7 V8.2
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC PCS 7 V9.0
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC Professional (TIA Portal V13)
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC Professional (TIA Portal V14)
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC Professional (TIA Portal V15)
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC Runtime Professional V13
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC Runtime Professional V14
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC Runtime Professional V15
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.2 and earlier
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC V7.3
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.4
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.5
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- FixedSIMATIC PCS 7 V8.1
Update WinCC to V7.3 Upd 19 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768972
https://support.industry.siemens.com/cs/ww/en/view/109768972 - FixedSIMATIC PCS 7 V8.2
Update WinCC to V7.4 SP1 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768093
https://support.industry.siemens.com/cs/ww/en/view/109768093 - FixedSIMATIC PCS 7 V9.0
Update WinCC to V7.4 SP1 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768093
https://support.industry.siemens.com/cs/ww/en/view/109768093 - FixedSIMATIC WinCC Professional (TIA Portal V14)
Update to V14 SP1 Upd 9 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747387
https://support.industry.siemens.com/cs/ww/en/view/109747387 - FixedSIMATIC WinCC Professional (TIA Portal V15)
Update to V15.1 Upd 3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109763890
https://support.industry.siemens.com/cs/ww/en/view/109763890 - FixedSIMATIC WinCC Runtime Professional V14
Update to V14.1 Upd 8 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747394
https://support.industry.siemens.com/cs/ww/en/view/109747394 - FixedSIMATIC WinCC Runtime Professional V15
Update to V15.1 Upd 3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109763892
https://support.industry.siemens.com/cs/ww/en/view/109763892 - FixedSIMATIC WinCC V7.3
Update to V7.3 Upd 19 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768972
https://support.industry.siemens.com/cs/ww/en/view/109768972 - FixedSIMATIC WinCC V7.4
Update to V7.4 SP1 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768093
https://support.industry.siemens.com/cs/ww/en/view/109768093 - FixedSIMATIC WinCC V7.5
Update to V7.5 Upd 3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109767227
https://support.industry.siemens.com/cs/ww/en/view/109767227
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan