ICSA-20-070-02

icsaUScisa_csaf_ot

Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller over Profinet (Update A)

view advisory published 2020-03-10

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-18336UShigh7.5—
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3.X.17), SIMATIC TDC CP51M1 (All versions < V1.1.8)…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

  • MitigationSIMATIC S7-300 CPU family (incl.'related ET200 CPUs and SIPLUS variants)

    Make sure that access to port 102/tcp is restricted e.g.'with an external firewall.

  • MitigationSIMATIC TDC CP51M1

    Make sure that access to port 102/tcp is restricted e.g.'with an external firewall.

  • MitigationSIMATIC TDC CPU555

    Make sure that access to port 102/tcp is restricted e.g.'with an external firewall.

  • MitigationSINUMERIK 840D sl

    Make sure that access to port 102/tcp is restricted e.g.'with an external firewall.

  • FixedSIMATIC S7-300 CPU family (incl.'related ET200 CPUs and SIPLUS variants)

    Update to V3.X.17

  • FixedSIMATIC TDC CP51M1

    Update to V1.1.8

  • FixedSIMATIC TDC CPU555

    Update to V1.1.1

  • FixedSINUMERIK 840D sl

    Update to V4.8.6

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan