ICSA-18-088-03

icsaUScisa_csaf_ot

Siemens SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional, and SIMATIC NET PC Software (Update G)

view advisory published 2018-03-27

A Denial-of-Service vulnerability has been identified in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC-Software. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2018-4832UShigh7.5—
A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All vers…
02

references

External citations — patches, advisories, analysis.

03

remediations (54)

  • MitigationOpenPCS 7 V7.1 and earlier

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationOpenPCS 7 V8.0

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationOpenPCS 7 V8.1

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationOpenPCS 7 V8.2

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationOpenPCS 7 V9.0

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC BATCH V7.1 and earlier

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC BATCH V8.0

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC BATCH V8.1

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC BATCH V8.2

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC BATCH V9.0

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC NET PC Software V14

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC NET PC Software V15

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC PCS 7 V7.1 and earlier

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC PCS 7 V8.0

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC PCS 7 V8.1

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC PCS 7 V8.2

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC PCS 7 V9.0

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC Route Control V7.1 and earlier

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC Route Control V8.0

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC Route Control V8.1

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC Route Control V8.2

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC Route Control V9.0

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC WinCC Runtime Professional V13

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC WinCC Runtime Professional V14

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC WinCC V7.2 and earlier

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC WinCC V7.3

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC WinCC V7.4

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • No fix plannedOpenPCS 7 V7.1 and earlier

    Currently no fix is planned

  • No fix plannedOpenPCS 7 V8.0

    Currently no fix is planned

  • No fix plannedSIMATIC BATCH V7.1 and earlier

    Currently no fix is planned

  • No fix plannedSIMATIC PCS 7 V7.1 and earlier

    Currently no fix is planned

  • No fix plannedSIMATIC PCS 7 V8.0

    Currently no fix is planned

  • No fix plannedSIMATIC PCS 7 V8.1

    Currently no fix is planned

  • No fix plannedSIMATIC Route Control V7.1 and earlier

    Currently no fix is planned

  • No fix plannedSIMATIC Route Control V8.0

    Currently no fix is planned

  • No fix plannedSIMATIC Route Control V8.1

    Currently no fix is planned

  • FixedOpenPCS 7 V8.1

    Update to OpenPCS 7 V8.1 Upd 5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109761055
  • FixedOpenPCS 7 V8.2

    See remediation for PCS 7 V8.2

  • FixedOpenPCS 7 V9.0

    See remediation for PCS 7 V9.0

  • FixedSIMATIC BATCH V8.0

    Update to SIMATIC BATCH V8.0 SP1 Upd21 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109756847
  • FixedSIMATIC BATCH V8.1

    Update to SIMATIC BATCH V8.1 SP1 Upd16 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109756846
  • FixedSIMATIC BATCH V8.2

    Update to SIMATIC BATCH V8.2 Upd10 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757796
  • FixedSIMATIC BATCH V9.0

    See remediation for PCS 7 V9.0

  • FixedSIMATIC NET PC Software V14

    Update to V14 SP1 Update 14 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109807351/
  • FixedSIMATIC NET PC Software V15

    Update to V15 SP1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109762690
  • FixedSIMATIC PCS 7 V8.2

    Update to V8.2 SP1 or later version

  • FixedSIMATIC PCS 7 V9.0

    Update to V9.0 SP1 (Includes Open PCS 7 V9.0 Upd1, SIMATIC Batch V9.0 SP1, SIMATIC Route Control V9.0 Upd1 and SIMATIC WinCC V7.4 SP1 Upd4).

  • FixedSIMATIC Route Control V8.2

    See remediation for PCS 7 V8.2

  • FixedSIMATIC Route Control V9.0

    See remediation for PCS 7 V9.0

  • FixedSIMATIC WinCC Runtime Professional V13

    Update to V13 SP2 Upd2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109759753
  • FixedSIMATIC WinCC Runtime Professional V14

    Update to V14 SP1 Upd5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109747394
  • FixedSIMATIC WinCC V7.2 and earlier

    Update to WinCC 7.2 Upd 15 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109762887
  • FixedSIMATIC WinCC V7.3

    Update to WinCC 7.3 Upd 16 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109756123
  • FixedSIMATIC WinCC V7.4

    Update to V7.4 SP1 Upd 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109753031
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan