ICSA-22-104-16

Siemens TIA Administrator

view advisory published 2022-04-12

In conjunction with the installation of the affected products listed in the table below, a vulnerability in TIA Administrator occurs that could allow an unauthenticated attacker to perform a denial of service attack. Siemens has released updates for the affected products and recommends to update to the latest versions.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-27194US	high7.5	1.43% (73rd)	—	2022-04-12
A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affec…

references

External citations — patches, advisories, analysis.

remediations (6)

MitigationSIMATIC PCS neo (Administration Console)
Apply measures described in "Industrial Security in SIMATIC PCS neo": https://support.industry.siemens.com/cs/ww/en/view/109771524/
MitigationSINETPLAN
Restrict access to port 8888/tcp to localhost (default)
MitigationTIA Portal
Restrict access to port 8888/tcp to localhost (default)
FixedSIMATIC PCS neo (Administration Console)
Update to V3.1 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807752/
FixedSINETPLAN
Update TIA Administrator to V1.0 SP7 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/
FixedTIA Portal
Update TIA Administrator to V1.0 SP7 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan