Siemens SIMATIC and SIPLUS Products
Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver to perform a denial of service attack. Siemens has released a new version for SINAMICS S120 (incl. SIPLUS variants) and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-47375US | — | — | ||
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMA… | ||||
| CVE-2022-47374US | — | — | ||
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMA… | ||||
references
External citations — patches, advisories, analysis.
- SSA-892915: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - CSAF Versionself
- SSA-892915: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - HTML Versionself
- SSA-892915: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - PDF Versionself
- SSA-892915: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - TXT Versionself
- ICS Advisory ICSA-23-348-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-348-05 - Web Versionself
- Recommended Practicesexternal
remediations (36)
- No fix planned SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0)
Currently no fix is planned
- No fix planned SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0)
Currently no fix is planned
- No fix planned SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0)
Currently no fix is planned
- No fix planned SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0)
Currently no fix is planned
- No fix planned SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0)
Currently no fix is planned
- No fix planned SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0)
Currently no fix is planned
- No fix planned SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0)
Currently no fix is planned
- No fix planned SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0)
Currently no fix is planned
- No fix plannedSIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0)
Currently no fix is planned
- No fix plannedSIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0)
Currently no fix is planned
- No fix plannedSIMATIC PC-Station Plus
Currently no fix is planned
- No fix plannedSIMATIC PC-Station Plus
Currently no fix is planned
- No fix plannedSIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0)
Currently no fix is planned
- No fix plannedSIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0)
Currently no fix is planned
- No fix plannedSIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)
Currently no fix is planned
- No fix plannedSIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)
Currently no fix is planned
- FixedSINAMICS S120 (incl. SIPLUS variants)
Update to V5.2 SP3 HF15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780844/ - FixedSINAMICS S120 (incl. SIPLUS variants)
Update to V5.2 SP3 HF15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780844/ - Workaround SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0)
Disable the web server of the affected system
- Workaround SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0)
Disable the web server of the affected system
- Workaround SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0)
Disable the web server of the affected system
- Workaround SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0)
Disable the web server of the affected system
- Workaround SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0)
Disable the web server of the affected system
- Workaround SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0)
Disable the web server of the affected system
- Workaround SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0)
Disable the web server of the affected system
- Workaround SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0)
Disable the web server of the affected system
- WorkaroundSIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0)
Disable the web server of the affected system
- WorkaroundSIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0)
Disable the web server of the affected system
- WorkaroundSIMATIC PC-Station Plus
Disable the web server of the affected system
- WorkaroundSIMATIC PC-Station Plus
Disable the web server of the affected system
- WorkaroundSINAMICS S120 (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSINAMICS S120 (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0)
Disable the web server of the affected system
- WorkaroundSIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0)
Disable the web server of the affected system
- WorkaroundSIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)
Disable the web server of the affected system
- WorkaroundSIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)
Disable the web server of the affected system
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan