Siemens SINUMERIK ONE and SINUMERIK MC (Update A)
SINUMERIK ONE and SINUMERIK MC products are affected by a memory protection bypass vulnerability in the integrated S7-1500 CPU that could allow an attacker to write arbitrary data and code to protected memory areas or read sensitive data to launch further attacks on the CPU. Siemens has released updates for the affected products and recommends that customers update to the new version.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-15782US | critical9.8 | — | ||
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions… | ||||
references
External citations — patches, advisories, analysis.
- SSA-434536: Memory Protection Bypass Vulnerability in SINUMERIK ONE and SINUMERIK MC - CSAF Versionself
- SSA-434536: Memory Protection Bypass Vulnerability in SINUMERIK ONE and SINUMERIK MC - PDF Versionself
- SSA-434536: Memory Protection Bypass Vulnerability in SINUMERIK ONE and SINUMERIK MC - TXT Versionself
- ICS Advisory ICSA-21-194-17 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-194-17 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationSINUMERIK MC
Limit access to port 102/tcp to trusted users and systems only
- MitigationSINUMERIK ONE
Limit access to port 102/tcp to trusted users and systems only
- FixedSINUMERIK MC
Update to V6.15 or later version
- FixedSINUMERIK ONE
Update to V6.15 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan