Siemens S7-1200 and S7-200 SMART CPUs (Update B)
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-13945US | medium6.8 | — | ||
A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-1200 CPU family < V4.x (incl. SIPLUS variants) (All versions),… | ||||
references
External citations — patches, advisories, analysis.
- SSA-686531: Hardware based manufacturing access on S7-1200 and S7-200 SMART - HTML Versionself
- ICS Advisory ICSA-19-318-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-19-318-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (32)
- MitigationSIMATIC S7-1200 CPU family < V4.x (incl.'SIPLUS variants)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
- MitigationSIMATIC S7-1200 CPU family V4.x (incl.'SIPLUS variants)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
- MitigationSIMATIC S7-200 SMART CPU CR20s (6ES7 288-1CR20-0AA1)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
- MitigationSIMATIC S7-200 SMART CPU CR30s (6ES7 288-1CR30-0AA1)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
- MitigationSIMATIC S7-200 SMART CPU CR40 (6ES7 288-1CR40-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
- MitigationSIMATIC S7-200 SMART CPU CR40s (6ES7 288-1CR40-0AA1)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
- MitigationSIMATIC S7-200 SMART CPU CR60 (6ES7 288-1CR60-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
- MitigationSIMATIC S7-200 SMART CPU CR60s (6ES7 288-1CR60-0AA1)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
- MitigationSIMATIC S7-200 SMART CPU SR20 (6ES7 288-1SR20-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
- MitigationSIMATIC S7-200 SMART CPU SR30 (6ES7 288-1SR30-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
- MitigationSIMATIC S7-200 SMART CPU SR40 (6ES7 288-1SR40-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
- MitigationSIMATIC S7-200 SMART CPU SR60 (6ES7 288-1SR60-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
- MitigationSIMATIC S7-200 SMART CPU ST20 (6ES7 288-1ST20-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
- MitigationSIMATIC S7-200 SMART CPU ST30 (6ES7 288-1ST30-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
- MitigationSIMATIC S7-200 SMART CPU ST40 (6ES7 288-1ST40-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
- MitigationSIMATIC S7-200 SMART CPU ST60 (6ES7 288-1ST60-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
- No fix availableSIMATIC S7-1200 CPU family < V4.x (incl.'SIPLUS variants)
Firmware versions less than V4.x cannot be updated.
- FixedSIMATIC S7-1200 CPU family V4.x (incl.'SIPLUS variants)
Update to version >= V4.4.1 and Function State (FS) >= 11
- FixedSIMATIC S7-200 SMART CPU CR20s (6ES7 288-1CR20-0AA1)
Update to version >= V2.3.0 and the latest boot loader version
- FixedSIMATIC S7-200 SMART CPU CR30s (6ES7 288-1CR30-0AA1)
Update to version >= V2.3.0 and the latest boot loader version
- FixedSIMATIC S7-200 SMART CPU CR40 (6ES7 288-1CR40-0AA0)
Update to version >= V2.2.3 and the latest boot loader version
- FixedSIMATIC S7-200 SMART CPU CR40s (6ES7 288-1CR40-0AA1)
Update to version >= V2.3.0 and the latest boot loader version
- FixedSIMATIC S7-200 SMART CPU CR60 (6ES7 288-1CR60-0AA0)
Update to version >= V2.2.3 and the latest boot loader version
- FixedSIMATIC S7-200 SMART CPU CR60s (6ES7 288-1CR60-0AA1)
Update to version >= V2.3.0 and the latest boot loader version
- FixedSIMATIC S7-200 SMART CPU SR20 (6ES7 288-1SR20-0AA0)
Update to version >= V2.5.1 and the latest boot loader version
- FixedSIMATIC S7-200 SMART CPU SR30 (6ES7 288-1SR30-0AA0)
Update to version >= V2.5.1 and the latest boot loader version
- FixedSIMATIC S7-200 SMART CPU SR40 (6ES7 288-1SR40-0AA0)
Update to version >= V2.5.1 and the latest boot loader version
- FixedSIMATIC S7-200 SMART CPU SR60 (6ES7 288-1SR60-0AA0)
Update to version >= V2.5.1 and the latest boot loader version
- FixedSIMATIC S7-200 SMART CPU ST20 (6ES7 288-1ST20-0AA0)
Update to version >= V2.5.1 and the latest boot loader version
- FixedSIMATIC S7-200 SMART CPU ST30 (6ES7 288-1ST30-0AA0)
Update to version >= V2.5.1 and the latest boot loader version
- FixedSIMATIC S7-200 SMART CPU ST40 (6ES7 288-1ST40-0AA0)
Update to version >= V2.5.1 and the latest boot loader version
- FixedSIMATIC S7-200 SMART CPU ST60 (6ES7 288-1ST60-0AA0)
Update to version >= V2.5.1 and the latest boot loader version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan