ICSA-17-129-01 Siemens devices using the PROFINET Discovery and Configuration Protocol (Update K)
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-6865US | medium6.5 | — | ||
A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions < V1… | ||||
references
External citations — patches, advisories, analysis.
remediations (39)
- MitigationPrimary Setup Tool (PST)
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC Automation Tool
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC NET PC-Software
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC PCS 7 V8.1 and earlier versions
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC PCS 7 V8.2
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC STEP 7 (TIA Portal) V13
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC STEP 7 (TIA Portal) V14
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC STEP 7 V5.X
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinAC RTX (F) 2010 SP2
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC (TIA Portal) V13
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC (TIA Portal) V14
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.2 and prior
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC V7.3
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.4
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC flexible 2008
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSINAUT ST7CC
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSINEMA Server
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSINUMERIK 808D Programming Tool
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSMART PC Access
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSTEP 7 - Micro/WIN SMART
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSecurity Configuration Tool (SCT)
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- FixedPrimary Setup Tool (PST)
Update to V4.2 HF1 - Download: https://support.industry.siemens.com/cs/ww/en/view/19440762
https://support.industry.siemens.com/cs/ww/en/view/19440762 - FixedSIMATIC Automation Tool
Update to V3.0 - Download: https://support.industry.siemens.com/cs/ww/en/view/98161300
https://support.industry.siemens.com/cs/ww/en/view/98161300 - FixedSIMATIC NET PC-Software
Upgrade to V14 SP1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747482
https://support.industry.siemens.com/cs/ww/en/view/109747482 - FixedSIMATIC PCS 7 V8.1 and earlier versions
See recommendations from section Workarounds and Mitigations, or upgrade to V9.0 - Download: https://www.siemens.de/automation/partner
https://www.siemens.de/automation/partner - FixedSIMATIC STEP 7 (TIA Portal) V13
Update to V13 SP 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745155
https://support.industry.siemens.com/cs/ww/en/view/109745155 - FixedSIMATIC STEP 7 (TIA Portal) V14
Update to V14 SP 1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745984
https://support.industry.siemens.com/cs/ww/en/view/109745984 - FixedSIMATIC STEP 7 V5.X
Update to V5.6 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747706
https://support.industry.siemens.com/cs/ww/en/view/109747706 - FixedSIMATIC WinAC RTX (F) 2010 SP2
Update to SIMATIC WinAC RTX 2010 SP3 and apply BIOS and Microsoft Windows updates - Download: https://support.industry.siemens.com/cs/ww/en/view/109765109
https://support.industry.siemens.com/cs/ww/en/view/109765109 - FixedSIMATIC WinCC (TIA Portal) V13
Update to V13 SP2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109746073
https://support.industry.siemens.com/cs/ww/en/view/109746073 - FixedSIMATIC WinCC (TIA Portal) V14
Update to V14 SP 1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745460
https://support.industry.siemens.com/cs/ww/en/view/109745460 - FixedSIMATIC WinCC V7.3
Update to V7.3 Update 15 - Download: https://support.industry.siemens.com/cs/ww/en/view/109750182
https://support.industry.siemens.com/cs/ww/en/view/109750182 - FixedSIMATIC WinCC V7.4
Update to V7.4 SP1 Upd1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109748024
https://support.industry.siemens.com/cs/ww/en/view/109748024 - FixedSIMATIC WinCC flexible 2008
Upgrade to WinCC flexible 2008 SP5 - Download: https://support.industry.siemens.com/cs/ww/en/view/109749111
https://support.industry.siemens.com/cs/ww/en/view/109749111 - FixedSINAUT ST7CC
15 Update SIMATIC WinCC to V7.3 Update 15 or newer - Download: https://support.industry.siemens.com/cs/ww/en/view/109750182
https://support.industry.siemens.com/cs/ww/en/view/109750182 - FixedSINEMA Server
Upgrade to V14 - Download: https://support.industry.siemens.com/cs/ww/en/view/109748854
https://support.industry.siemens.com/cs/ww/en/view/109748854 - FixedSMART PC Access
Update to V2.3 - Download: SMART PC Access V2.3 can be obtained by contacting your local Siemens representative or customer support: https://w3.siemens.com/aspa_app/
https://w3.siemens.com/aspa - FixedSTEP 7 - Micro/WIN SMART
Update to V2.3 - Download: Micro/WIN SMART V2.3 can be obtained by contacting your local Siemens representative or customer support: https://w3.siemens.com/aspa_app/
https://w3.siemens.com/aspa - FixedSecurity Configuration Tool (SCT)
Update to V5.0 - Download: https://support.industry.siemens.com/cs/de/en/view/109747539
https://support.industry.siemens.com/cs/de/en/view/109747539
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan