Siemens SIMATIC S7-1200 and S7-1500 CPU Families
SIMATIC S7-1200, S7-1500 CPUs and related products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI communication. This could allow attackers to discover the private key of a CPU product family by an offline attack against a single CPU of the family. Attackers could then use this knowledge to extract confidential configuration data from projects that are protected by that key or to perform attacks against legacy PG/PC and HMI communication. Siemens recommends to update both the affected products as well as the corresponding TIA Portal project to the latest versions. TIA Portal V17 and related CPU firmware versions introduced protection of confidential configuration data based on individual passwords per device and TLS-protected PG/PC and HMI communication. Additional details can be found in the related Siemens security bulletin SSB-898115 ( https://cert-portal.siemens.com/productcert/html/ssb-898115.html).
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-38465US | high7.8 | — | ||
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions… | ||||
references
External citations — patches, advisories, analysis.
- SSA-568427: Weak Key Protection Vulnerability in SIMATIC S7-1200 and S7-1500 CPU Families - CSAF Versionself
- SSA-568427: Weak Key Protection Vulnerability in SIMATIC S7-1200 and S7-1500 CPU Families - PDF Versionself
- SSA-568427: Weak Key Protection Vulnerability in SIMATIC S7-1200 and S7-1500 CPU Families - TXT Versionself
- ICS Advisory ICSA-22-286-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-286-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (14)
- MitigationSIMATIC Drive Controller family
Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors
- MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors
- MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors
- MitigationSIMATIC S7-1200 CPU family (incl. SIPLUS variants)
Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors
- MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors
- MitigationSIMATIC S7-1500 Software Controller
Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors
- MitigationSIMATIC S7-PLCSIM Advanced
Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors
- No fix plannedSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
Currently no fix is planned
- FixedSIMATIC Drive Controller family
Update to V2.9.2 or later version, migrate project in TIA Portal to this version and redeploy.
https://support.industry.siemens.com/cs/ww/en/view/109773914/ - FixedSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
Update to V21.9 or later version, migrate project in TIA Portal to this version and redeploy.
https://support.industry.siemens.com/cs/ww/en/view/109759122/ - FixedSIMATIC S7-1200 CPU family (incl. SIPLUS variants)
Update to V4.5.0 or later version, migrate project in TIA Portal to this version and redeploy.
https://support.industry.siemens.com/cs/ww/en/view/109793280/ - FixedSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Update to V2.9.2 or later version, migrate project in TIA Portal to this version and redeploy.
https://support.industry.siemens.com/cs/ww/en/view/109478459/ - FixedSIMATIC S7-1500 Software Controller
Update to V21.9 or later version, migrate project in TIA Portal to this version and redeploy.
https://support.industry.siemens.com/cs/ww/en/view/109478528/ - FixedSIMATIC S7-PLCSIM Advanced
Update to V4.0 or later version, migrate project in TIA Portal to the corresponding version and redeploy.
https://support.industry.siemens.com/cs/ww/en/view/109795016/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan