ICSA-18-088-02

icsaUScisa_csaf_ot

Siemens TIM 1531 IRC

view advisory published 2018-03-27

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2018-4841UScritical9.8—
A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operati…
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • MitigationTIM 1531 IRC (incl. SIPLUS NET variants)

    Users can limit access to port 80/tcp and port 443/tcp in their network infrastructure (e.g. cell-protection firewall or corporate firewall) to reduce the risk.

  • FixedTIM 1531 IRC (incl. SIPLUS NET variants)

    Update to V1.1 https://support.industry.siemens.com/cs/ww/en/view/109755374

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan