ICSA-22-104-11

Siemens SIMATIC Energy Manager

view advisory published 2022-04-12

SIMATIC Energy Manager is affected by multiple vulnerabilities that could allow an attacker to gain local privilege escalation, local code execution or remote code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-23450US	critical9.8	35.7% (98th)	—	2022-04-12
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). The affected system a…
CVE-2022-23449US	high7.3	0.33% (26th)	—	2022-04-12
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). A DLL Hijacking vulne…
CVE-2022-23448US	high7.8	0.25% (16th)	—	2022-04-12
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). Affected applications…

references

External citations — patches, advisories, analysis.

remediations (12)

MitigationSIMATIC Energy Manager Basic
Enable encryption in the SIMATIC Energy Manager configuration
MitigationSIMATIC Energy Manager Basic
Enable encryption in the SIMATIC Energy Manager configuration
MitigationSIMATIC Energy Manager Basic
Enable encryption in the SIMATIC Energy Manager configuration
MitigationSIMATIC Energy Manager PRO
Enable encryption in the SIMATIC Energy Manager configuration
MitigationSIMATIC Energy Manager PRO
Enable encryption in the SIMATIC Energy Manager configuration
MitigationSIMATIC Energy Manager PRO
Enable encryption in the SIMATIC Energy Manager configuration
FixedSIMATIC Energy Manager Basic
Update to V7.3 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808211/
FixedSIMATIC Energy Manager Basic
Update to V7.3 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808211/
FixedSIMATIC Energy Manager Basic
Update to V7.3 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808211/
FixedSIMATIC Energy Manager PRO
Update to V7.3 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808211/
FixedSIMATIC Energy Manager PRO
Update to V7.3 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808211/
FixedSIMATIC Energy Manager PRO
Update to V7.3 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808211/

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan