Siemens SINAMICS (Update C)
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-6568US | medium5.0 | — | ||
The webserver of the affected devices contains a vulnerability that may lead to
a denial of service condition. An attacker may cause a denial of service
situation which leads to… | ||||
references
External citations — patches, advisories, analysis.
- SSA-530931: Denial-of-Service in Webserver of Industrial Products - HTML Versionself
- ICS Advisory ICSA-19-227-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-19-227-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (21)
- MitigationSINAMICS GH150 V4.7 (Control Unit)
Apply appropriate strategies for mitigation as described in the General Security Recommendation section.
- MitigationSINAMICS GH150 V4.8 (Control Unit)
Apply appropriate strategies for mitigation as described in the General Security Recommendation section.
- MitigationSINAMICS GL150 V4.7 (Control Unit)
Apply appropriate strategies for mitigation as described in the General Security Recommendation section.
- MitigationSINAMICS GL150 V4.8 (Control Unit)
Apply appropriate strategies for mitigation as described in the General Security Recommendation section.
- MitigationSINAMICS GM150 V4.7 (Control Unit)
Apply appropriate strategies for mitigation as described in the General Security Recommendation section.
- MitigationSINAMICS GM150 V4.8 (Control Unit)
Apply appropriate strategies for mitigation as described in the General Security Recommendation section.
- MitigationSINAMICS SL150 V4.7 (Control Unit)
Apply appropriate strategies for mitigation as described in the General Security Recommendation section.
- MitigationSINAMICS SL150 V4.8 (Control Unit)
Apply appropriate strategies for mitigation as described in the General Security Recommendation section.
- MitigationSINAMICS SM120 V4.7 (Control Unit)
Apply appropriate strategies for mitigation as described in the General Security Recommendation section.
- MitigationSINAMICS SM120 V4.8 (Control Unit)
Apply appropriate strategies for mitigation as described in the General Security Recommendation section.
- MitigationSINAMICS SM150 V4.8 (Control Unit)
Apply appropriate strategies for mitigation as described in the General Security Recommendation section.
- FixedSINAMICS GH150 V4.7 (Control Unit)
Upgrade to V4.8 SP2 HF9 or later version. The software can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS GH150 V4.8 (Control Unit)
Upgrade to V4.8 SP2 HF9 or later version. The software can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS GL150 V4.7 (Control Unit)
Upgrade to V4.8 SP2 HF9 or later version. The software can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS GL150 V4.8 (Control Unit)
Upgrade to V4.8 SP2 HF9 or later version. The software can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS GM150 V4.8 (Control Unit)
Upgrade to V4.8 SP2 HF9 or later version. The software can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS SL150 V4.7 (Control Unit)
Update to V4.7 HF33 or upgrade to V5.2 SP2. The software can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS SL150 V4.8 (Control Unit)
Upgrade to V5.2 SP2. The software can be obtained from your Siemens representative or via Siemens customer service
- FixedSINAMICS SM120 V4.7 (Control Unit)
Upgrade to V4.8 SP2 HF10 or later version. The software can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS SM120 V4.8 (Control Unit)
Upgrade to V4.8 SP2 HF10 or later version. The software can be obtained from your Siemens representative or via Siemens customer service.
- FixedSINAMICS SM150 V4.8 (Control Unit)
Upgrade to V5.1 SP2 HF3 or later version. The software can be obtained from your Siemens representative or via Siemens customer service.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan