ICSA-19-134-08 Siemens SIMATIC PCS7, WinCC, TIA Portal (Update D)
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10918US | high8.8 | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versi… | ||||
| CVE-2019-10917US | medium5.5 | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versi… | ||||
| CVE-2019-10916US | high8.8 | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versi… | ||||
references
External citations — patches, advisories, analysis.
- SSA-697412: Multiple Vulnerabilities in SIMATIC WinCC, SIMATIC WinCC Runtime,SIMATIC PCS 7, SIMATIC TIA Portalself
- ICS Advisory ICSA-19-134-08 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-19-134-08 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (72)
- MitigationSIMATIC PCS 7 V8.0 and earlier
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC PCS 7 V8.0 and earlier
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC PCS 7 V8.0 and earlier
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC PCS 7 V8.1
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC PCS 7 V8.1
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC PCS 7 V8.1
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC PCS 7 V8.2
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC PCS 7 V8.2
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC PCS 7 V8.2
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC PCS 7 V9.0
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC PCS 7 V9.0
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC PCS 7 V9.0
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC (TIA Portal) V13
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC (TIA Portal) V13
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC (TIA Portal) V13
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC (TIA Portal) V14
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC (TIA Portal) V14
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC (TIA Portal) V14
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC (TIA Portal) V15
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC (TIA Portal) V15
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC (TIA Portal) V15
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC Runtime Professional V13
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC Runtime Professional V13
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC Runtime Professional V13
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC Runtime Professional V14
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC Runtime Professional V14
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC Runtime Professional V14
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC Runtime Professional V15
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC Runtime Professional V15
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC Runtime Professional V15
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.2 and earlier
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC V7.2 and earlier
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC V7.2 and earlier
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC V7.3
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.3
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.3
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.4
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.4
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.4
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.5
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.5
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.5
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- FixedSIMATIC PCS 7 V8.1
Update WinCC to V7.3 Upd 19 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768972
https://support.industry.siemens.com/cs/ww/en/view/109768972 - FixedSIMATIC PCS 7 V8.1
Update WinCC to V7.3 Upd 19 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768972
https://support.industry.siemens.com/cs/ww/en/view/109768972 - FixedSIMATIC PCS 7 V8.1
Update WinCC to V7.3 Upd 19 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768972
https://support.industry.siemens.com/cs/ww/en/view/109768972 - FixedSIMATIC PCS 7 V8.2
Update WinCC to V7.4 SP1 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768093
https://support.industry.siemens.com/cs/ww/en/view/109768093 - FixedSIMATIC PCS 7 V8.2
Update WinCC to V7.4 SP1 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768093
https://support.industry.siemens.com/cs/ww/en/view/109768093 - FixedSIMATIC PCS 7 V8.2
Update WinCC to V7.4 SP1 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768093
https://support.industry.siemens.com/cs/ww/en/view/109768093 - FixedSIMATIC PCS 7 V9.0
Update WinCC to V7.4 SP1 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768093
https://support.industry.siemens.com/cs/ww/en/view/109768093 - FixedSIMATIC PCS 7 V9.0
Update WinCC to V7.4 SP1 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768093
https://support.industry.siemens.com/cs/ww/en/view/109768093 - FixedSIMATIC PCS 7 V9.0
Update WinCC to V7.4 SP1 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768093
https://support.industry.siemens.com/cs/ww/en/view/109768093 - FixedSIMATIC WinCC (TIA Portal) V14
Update to V14 SP1 Upd 9 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747387
https://support.industry.siemens.com/cs/ww/en/view/109747387 - FixedSIMATIC WinCC (TIA Portal) V14
Update to V14 SP1 Upd 9 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747387
https://support.industry.siemens.com/cs/ww/en/view/109747387 - FixedSIMATIC WinCC (TIA Portal) V14
Update to V14 SP1 Upd 9 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747387
https://support.industry.siemens.com/cs/ww/en/view/109747387 - FixedSIMATIC WinCC (TIA Portal) V15
Update to V15.1 Upd 3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109763890
https://support.industry.siemens.com/cs/ww/en/view/109763890 - FixedSIMATIC WinCC (TIA Portal) V15
Update to V15.1 Upd 3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109763890
https://support.industry.siemens.com/cs/ww/en/view/109763890 - FixedSIMATIC WinCC (TIA Portal) V15
Update to V15.1 Upd 3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109763890
https://support.industry.siemens.com/cs/ww/en/view/109763890 - FixedSIMATIC WinCC Runtime Professional V14
Update to V14.1 Upd 8 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747394
https://support.industry.siemens.com/cs/ww/en/view/109747394 - FixedSIMATIC WinCC Runtime Professional V14
Update to V14.1 Upd 8 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747394
https://support.industry.siemens.com/cs/ww/en/view/109747394 - FixedSIMATIC WinCC Runtime Professional V14
Update to V14.1 Upd 8 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747394
https://support.industry.siemens.com/cs/ww/en/view/109747394 - FixedSIMATIC WinCC Runtime Professional V15
Update to V15.1 Upd 3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109763892
https://support.industry.siemens.com/cs/ww/en/view/109763892 - FixedSIMATIC WinCC Runtime Professional V15
Update to V15.1 Upd 3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109763892
https://support.industry.siemens.com/cs/ww/en/view/109763892 - FixedSIMATIC WinCC Runtime Professional V15
Update to V15.1 Upd 3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109763892
https://support.industry.siemens.com/cs/ww/en/view/109763892 - FixedSIMATIC WinCC V7.3
Update to V7.3 Upd 19 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768972
https://support.industry.siemens.com/cs/ww/en/view/109768972 - FixedSIMATIC WinCC V7.3
Update to V7.3 Upd 19 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768972
https://support.industry.siemens.com/cs/ww/en/view/109768972 - FixedSIMATIC WinCC V7.3
Update to V7.3 Upd 19 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768972
https://support.industry.siemens.com/cs/ww/en/view/109768972 - FixedSIMATIC WinCC V7.4
Update to V7.4 SP1 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768093
https://support.industry.siemens.com/cs/ww/en/view/109768093 - FixedSIMATIC WinCC V7.4
Update to V7.4 SP1 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768093
https://support.industry.siemens.com/cs/ww/en/view/109768093 - FixedSIMATIC WinCC V7.4
Update to V7.4 SP1 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768093
https://support.industry.siemens.com/cs/ww/en/view/109768093 - FixedSIMATIC WinCC V7.5
Update to V7.5 Upd 3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109767227
https://support.industry.siemens.com/cs/ww/en/view/109767227 - FixedSIMATIC WinCC V7.5
Update to V7.5 Upd 3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109767227
https://support.industry.siemens.com/cs/ww/en/view/109767227 - FixedSIMATIC WinCC V7.5
Update to V7.5 Upd 3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109767227
https://support.industry.siemens.com/cs/ww/en/view/109767227
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan