Siemens SIMATIC WinCC and PCS
Multiple vulnerabilities were found in SIMATIC WinCC that ultimately could allow attackers to retrieve and brute force password hashes and access other systems. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-40363US | high7.8OT elevated | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and ear… | ||||
| CVE-2021-40360US | high8.8 | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and ear… | ||||
references
External citations — patches, advisories, analysis.
- SSA-914168: Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products - CSAF Versionself
- SSA-914168: Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products - PDF Versionself
- SSA-914168: Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products - TXT Versionself
- ICS Advisory ICSA-22-041-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-041-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (26)
- MitigationSIMATIC PCS 7 V8.2
CVE-2021-40363: Harden the application's host to prevent local access by untrusted personnel
- MitigationSIMATIC PCS 7 V9.0
CVE-2021-40363: Harden the application's host to prevent local access by untrusted personnel
- MitigationSIMATIC PCS 7 V9.1
CVE-2021-40363: Harden the application's host to prevent local access by untrusted personnel
- MitigationSIMATIC WinCC V15 and earlier
CVE-2021-40363: Harden the application's host to prevent local access by untrusted personnel
- MitigationSIMATIC WinCC V16
CVE-2021-40363: Harden the application's host to prevent local access by untrusted personnel
- MitigationSIMATIC WinCC V17
CVE-2021-40363: Harden the application's host to prevent local access by untrusted personnel
- MitigationSIMATIC WinCC V7.4
CVE-2021-40363: Harden the application's host to prevent local access by untrusted personnel
- MitigationSIMATIC WinCC V7.5
CVE-2021-40363: Harden the application's host to prevent local access by untrusted personnel
- No fix plannedSIMATIC PCS 7 V8.2
Currently no fix is planned
- No fix plannedSIMATIC PCS 7 V8.2
Currently no fix is planned
- FixedSIMATIC PCS 7 V8.2
Install SIMATIC WinCC V7.4 SP1 Update 19 or later version
https://support.industry.siemens.com/cs/ww/en/view/109806846/ - FixedSIMATIC PCS 7 V8.2
Install SIMATIC WinCC V7.4 SP1 Update 19 or later version
https://support.industry.siemens.com/cs/ww/en/view/109806846/ - FixedSIMATIC PCS 7 V9.0
Update to V9.0 SP3 UpdateCollection04 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780528/ - FixedSIMATIC PCS 7 V9.0
Update to V9.0 SP3 UpdateCollection04 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780528/ - FixedSIMATIC PCS 7 V9.1
Update to V9.1 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805073/ - FixedSIMATIC PCS 7 V9.1
Update to V9.1 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805073/ - FixedSIMATIC WinCC V15 and earlier
Update to V15 SP1 Update 7 or later version
https://support.industry.siemens.com/cs/us/en/view/109763890/ - FixedSIMATIC WinCC V15 and earlier
Update to V15 SP1 Update 7 or later version
https://support.industry.siemens.com/cs/us/en/view/109763890/ - FixedSIMATIC WinCC V16
Update to V16 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776017/ - FixedSIMATIC WinCC V16
Update to V16 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776017/ - FixedSIMATIC WinCC V17
Update to V17 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/ - FixedSIMATIC WinCC V17
Update to V17 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/ - FixedSIMATIC WinCC V7.4
Update to V7.4 SP1 Update 19 or later version
https://support.industry.siemens.com/cs/ww/en/view/109806846/ - FixedSIMATIC WinCC V7.4
Update to V7.4 SP1 Update 19 or later version
https://support.industry.siemens.com/cs/ww/en/view/109806846/ - FixedSIMATIC WinCC V7.5
Update to V7.5 SP2 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793460/ - FixedSIMATIC WinCC V7.5
Update to V7.5 SP2 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793460/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan