Siemens OPC UA Protocol Stack Discovery Service (Update E)
Various industrial products use the Discovery Service of the OPC UA protocol stack by the OPC foundation https://github.com/OPCFoundation/UA-.NETStandard and could therefore be affected by the remote resource consumption attacks (CVE-2017-12069).
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-12069US | high8.2 | — | ||
An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server (LDS) before 1.03.367. Among the affected products are S… | ||||
references
External citations — patches, advisories, analysis.
- SSA-535640: Vulnerability in Industrial Products - CSAF Versionself
- SSA-535640: Vulnerability in Industrial Products - PDF Versionself
- SSA-535640: Vulnerability in Industrial Products - TXT Versionself
- ICS Advisory ICSA-17-243-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-17-243-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (12)
- MitigationSIMATIC IT Production Suite
Turn off the Discovery Service after commissioning or block it on the local firewall: https://support.industry.siemens.com/cs/ww/en/view/109749461
- MitigationSIMATIC NET PC Software V14
Turn off the Discovery Service after commissioning or block it on the local firewall: https://support.industry.siemens.com/cs/ww/en/view/109749461
- MitigationSIMATIC PCS 7
Turn off the Discovery Service after commissioning or block it on the local firewall: https://support.industry.siemens.com/cs/ww/en/view/109749461
- MitigationSIMATIC WinCC
Turn off the Discovery Service after commissioning or block it on the local firewall: https://support.industry.siemens.com/cs/ww/en/view/109749461
- MitigationSIMATIC WinCC Runtime Professional V13
Turn off the Discovery Service after commissioning or block it on the local firewall: https://support.industry.siemens.com/cs/ww/en/view/109749461
- MitigationSIMATIC WinCC Runtime Professional V14
Turn off the Discovery Service after commissioning or block it on the local firewall: https://support.industry.siemens.com/cs/ww/en/view/109749461
- No fix plannedSIMATIC PCS 7
Currently no fix is planned
- No fix plannedSIMATIC WinCC
Currently no fix is planned
- No fix plannedSIMATIC WinCC Runtime Professional V13
Currently no fix is planned
- FixedSIMATIC IT Production Suite
Update to V7.1 or later version
- FixedSIMATIC NET PC Software V14
Update to V14 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807351/ - FixedSIMATIC WinCC Runtime Professional V14
Update to V14 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746276
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan