ICSA-19-344-01

icsaUScisa_csaf_ot

Siemens SCALANCE W700 and W1700

view advisory published 2019-12-10

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2018-14526USmedium6.5—
An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption o…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • MitigationSCALANCE W1700

    Whenever possible, use AES-CCMP instead of TKIP in the WPA/WPA2 networks. This can be configured for both SCALANCE W-700 and W-1700 families over the Web Based Management (web server). For more information, go for the respective Manual.

  • MitigationSCALANCE W700

    Whenever possible, use AES-CCMP instead of TKIP in the WPA/WPA2 networks. This can be configured for both SCALANCE W-700 and W-1700 families over the Web Based Management (web server). For more information, go for the respective Manual.

  • FixedSCALANCE W1700

    Update to V1.1 or any later version https://support.industry.siemens.com/cs/ww/en/view/109762253

  • FixedSCALANCE W700

    Update to V6.4 or any later version https://support.industry.siemens.com/cs/ww/en/view/109773308

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan