Siemens SINUMERIK ONE and SINUMERIK MC
SINUMERIK ONE and SINUMERIK MC products are affected by a weak key protection vulnerability in the integrated S7-1500 CPU. The weak key protection vulnerability in the integrated S7-1500 CPU is documented in more detail in SSA-568427 [1]. Siemens has released updates for the affected products and recommends to update to the latest versions. [1] https://cert-portal.siemens.com/productcert/html/ssa-568427.html
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-38465US | high7.8 | — | ||
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions… | ||||
references
External citations — patches, advisories, analysis.
- SSA-568428: Weak Key Protection Vulnerability in SINUMERIK ONE and SINUMERIK MC - CSAF Versionself
- SSA-568428: Weak Key Protection Vulnerability in SINUMERIK ONE and SINUMERIK MC - PDF Versionself
- SSA-568428: Weak Key Protection Vulnerability in SINUMERIK ONE and SINUMERIK MC - TXT Versionself
- ICS Advisory ICSA-22-314-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-314-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationSINUMERIK MC
Expose the communication between the S7-1500 CPU and the HMI of the affected products only to trusted network environments
- MitigationSINUMERIK ONE
Expose the communication between the S7-1500 CPU and the HMI of the affected products only to trusted network environments
- FixedSINUMERIK MC
Update to V6.21 or later version SINUMERIK software can be obtained from your local Siemens account manager.
- FixedSINUMERIK ONE
Update to V6.21 or later version SINUMERIK software can be obtained from your local Siemens account manager.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan