ICSA-19-344-06

icsaUScisa_csaf_ot

Siemens SIMATIC S7-1200 and S7-1500 CPU Families (Update B)

view advisory published 2019-12-10

Successful exploitation of these vulnerabilities may allow an attacker to modify network traffic or impact the perceived integrity of the user program stored on the CPU.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2019-10943UShigh7.5OT elevated—
A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATI…
CVE-2019-10929USmedium5.9OT elevated—
A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open…
02

references

External citations — patches, advisories, analysis.

03

remediations (30)

  • MitigationSIMATIC Drive Controller family

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC Drive Controller family

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC S7-1200 CPU family (incl. SIPLUS variants)

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC S7-1200 CPU family (incl. SIPLUS variants)

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC S7-1500 Software Controller

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC S7-1500 Software Controller

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC S7-PLCSIM Advanced

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC S7-PLCSIM Advanced

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • FixedSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)

    SIMATIC ET 200SP Open Controller CPU 1515SP PC2: Update to v20.8

    https://support.industry.siemens.com/cs/document/109759122/
  • FixedSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)

    SIMATIC ET 200SP Open Controller CPU 1515SP PC2: Update to v20.8

    https://support.industry.siemens.com/cs/document/109759122/
  • FixedSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)

    SIMATIC ET 200SP Open Controller CPU 1515SP PC2: Update to v20.8

    https://support.industry.siemens.com/cs/document/109759122/
  • FixedSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)

    SIMATIC ET 200SP Open Controller CPU 1515SP PC2: Update to v20.8

    https://support.industry.siemens.com/cs/document/109759122/
  • FixedSIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC

    SIMATIC ET 200SP Open Controller CPU 1515SP PC2: Update to v20.8

    https://support.industry.siemens.com/cs/document/109759122/
  • FixedSIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC

    SIMATIC ET 200SP Open Controller CPU 1515SP PC2: Update to v20.8

    https://support.industry.siemens.com/cs/document/109759122/
  • FixedSIMATIC S7-1200 CPU family (incl. SIPLUS variants)

    SIMATIC S7-1200 CPU family: Update to v4.4.0

    https://support.industry.siemens.com/cs/ww/en/view/109793280/
  • FixedSIMATIC S7-1200 CPU family (incl. SIPLUS variants)

    SIMATIC S7-1200 CPU family: Update to v4.4.0

    https://support.industry.siemens.com/cs/ww/en/view/109793280/
  • FixedSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

    SIMATIC S7-1500 CPU family: Update to v2.8.1

    https://support.industry.siemens.com/cs/document/109478459/
  • FixedSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

    SIMATIC S7-1500 CPU family: Update to v2.8.1

    https://support.industry.siemens.com/cs/document/109478459/
  • FixedSIMATIC S7-1500 Software Controller

    SIMATIC S7-1500 Software Controller: Update to v20.8

    https://support.industry.siemens.com/cs/document/109772864/
  • FixedSIMATIC S7-1500 Software Controller

    SIMATIC S7-1500 Software Controller: Update to v20.8

    https://support.industry.siemens.com/cs/document/109772864/
  • FixedSIMATIC S7-PLCSIM Advanced

    SIMATIC S7 PLCSIM Advanced: Update to v3.0

    https://support.industry.siemens.com/cs/document/109772889/
  • FixedSIMATIC S7-PLCSIM Advanced

    SIMATIC S7 PLCSIM Advanced: Update to v3.0

    https://support.industry.siemens.com/cs/document/109772889/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan