Siemens Medium Voltage SINAMICS Products (Update A)
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-12741US | high7.5 | — | ||
Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually. | ||||
| CVE-2017-2680US | medium6.5 | — | ||
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required… | ||||
references
External citations — patches, advisories, analysis.
- SSA-546832: Vulnerabilities in Medium Voltage SINAMICS and SIMOTION Products - HTML Versionself
- ICS Advisory ICSA-18-128-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-18-128-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (32)
- MitigationSIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants)
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants)
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS GH150 V4.7 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS GH150 V4.7 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS GL150 V4.7 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS GL150 V4.7 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS GM150 V4.7 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS GM150 V4.7 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS SL150 V4.7.0 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS SL150 V4.7.0 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS SL150 V4.7.4 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS SL150 V4.7.4 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS SL150 V4.7.5 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS SL150 V4.7.5 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS SM120 V4.7 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS SM120 V4.7 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- FixedSIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants)
Update to V4.4 HF26 The update can be obtained from your Siemens representative or via Siemens customer service.
- FixedSIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants)
Update to V4.4 HF26. The update can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS GH150 V4.7 w. PROFINET
Update to V4.7 SP5 HF7 or upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS GH150 V4.7 w. PROFINET
Update to V4.7 SP5 HF7 or upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS GL150 V4.7 w. PROFINET
Upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS GL150 V4.7 w. PROFINET
Upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS GM150 V4.7 w. PROFINET
Update to V4.7 HF31 or update to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS GM150 V4.7 w. PROFINET
Update to V4.7 HF31 or update to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS SL150 V4.7.0 w. PROFINET
Update to V4.7 HF30 or upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS SL150 V4.7.0 w. PROFINET
Update to V4.7 HF30 or upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS SL150 V4.7.4 w. PROFINET
Upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS SL150 V4.7.4 w. PROFINET
Upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS SL150 V4.7.5 w. PROFINET
Upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS SL150 V4.7.5 w. PROFINET
Upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS SM120 V4.7 w. PROFINET
Upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS SM120 V4.7 w. PROFINET
Upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan