ICSA-19-036-04

icsaUScisa_csaf_ot

Siemens SIMATIC S7-1500 CPU

view advisory published 2019-01-08

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2018-16559UShigh7.5—
A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All versions <= V1.8.5). Specially crafted network packets sent t…
CVE-2018-16558UShigh7.5—
A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All versions <= V1.8.5). Specially crafted network packets sent t…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

    Apply cell protection concept

  • MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

    Apply cell protection concept

  • FixedSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

    Update to V2.5 or higher or when this is not possible (because of Hardware restrictions)

  • FixedSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

    Update to V2.5 or higher or when this is not possible (because of Hardware restrictions)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan