Siemens SIMATIC S7-1200 and S7-1500 CPU Families (Update A)
SIMATIC S7-1200 and S7-1500 CPU products contain a memory protection bypass vulnerability that could allow an attacker to write arbitrary data and code to protected memory areas or read sensitive data to launch further attacks. Siemens has released updates for several affected products and strongly recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-15782US | critical9.8 | — | ||
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions… | ||||
references
External citations — patches, advisories, analysis.
- SSA-434534: Memory Protection Bypass Vulnerability in SIMATIC S7-1200 and S7-1500 CPU Families - CSAF Versionself
- SSA-434534: Memory Protection Bypass Vulnerability in SIMATIC S7-1200 and S7-1500 CPU Families - PDF Versionself
- SSA-434534: Memory Protection Bypass Vulnerability in SIMATIC S7-1200 and S7-1500 CPU Families - TXT Versionself
- ICS Advisory ICSA-21-152-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-152-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (14)
- MitigationSIMATIC Drive Controller family
Apply "defense in depth" as outlined on pages 12ff of the operational guidelines for Industrial Security, especially: - Plant security: Physical prevention of access to critical components - Network security: Ensure that PLC systems are not connected to untrusted networks * System integrity: Configure, maintain and protect your device by applying applicable compensating controls and using built-in security capabilities
- MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
Apply "defense in depth" as outlined on pages 12ff of the operational guidelines for Industrial Security, especially: - Plant security: Physical prevention of access to critical components - Network security: Ensure that PLC systems are not connected to untrusted networks * System integrity: Configure, maintain and protect your device by applying applicable compensating controls and using built-in security capabilities
- MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
Apply "defense in depth" as outlined on pages 12ff of the operational guidelines for Industrial Security, especially: - Plant security: Physical prevention of access to critical components - Network security: Ensure that PLC systems are not connected to untrusted networks * System integrity: Configure, maintain and protect your device by applying applicable compensating controls and using built-in security capabilities
- MitigationSIMATIC S7-1200 CPU family (incl. SIPLUS variants)
Apply "defense in depth" as outlined on pages 12ff of the operational guidelines for Industrial Security, especially: - Plant security: Physical prevention of access to critical components - Network security: Ensure that PLC systems are not connected to untrusted networks * System integrity: Configure, maintain and protect your device by applying applicable compensating controls and using built-in security capabilities
- MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Apply "defense in depth" as outlined on pages 12ff of the operational guidelines for Industrial Security, especially: - Plant security: Physical prevention of access to critical components - Network security: Ensure that PLC systems are not connected to untrusted networks * System integrity: Configure, maintain and protect your device by applying applicable compensating controls and using built-in security capabilities
- MitigationSIMATIC S7-1500 Software Controller
Apply "defense in depth" as outlined on pages 12ff of the operational guidelines for Industrial Security, especially: - Plant security: Physical prevention of access to critical components - Network security: Ensure that PLC systems are not connected to untrusted networks * System integrity: Configure, maintain and protect your device by applying applicable compensating controls and using built-in security capabilities
- MitigationSIMATIC S7-PLCSIM Advanced
Apply "defense in depth" as outlined on pages 12ff of the operational guidelines for Industrial Security, especially: - Plant security: Physical prevention of access to critical components - Network security: Ensure that PLC systems are not connected to untrusted networks * System integrity: Configure, maintain and protect your device by applying applicable compensating controls and using built-in security capabilities
- No fix availableSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
Currently no remediation is available
- FixedSIMATIC Drive Controller family
Update to V2.9.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109773914/ - FixedSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
Update to V21.9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759122/ - FixedSIMATIC S7-1200 CPU family (incl. SIPLUS variants)
Update to V4.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793280/ - FixedSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Update to V2.9.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/ - FixedSIMATIC S7-1500 Software Controller
Update to V21.9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478528/ - FixedSIMATIC S7-PLCSIM Advanced
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109795016/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan