ICSA-16-355-01

icsaUScisa_csaf_ot

Siemens Desigo PX Web Module Insufficient Entropy Vulnerability

view advisory published 2016-09-23

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2016-9154UShigh7.5—
Siemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D (All firmware versions < V6.00.046) and…
02

references

External citations — patches, advisories, analysis.

03

remediations (21)

  • MitigationDesigo PX Web module PXA30-W0 firmware for Desigo PX automation controllers PXC00-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA30-W0 firmware for Desigo PX automation controllers PXC128-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA30-W0 firmware for Desigo PX automation controllers PXC64-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA30-W1 firmware for Desigo PX automation controllers PXC00-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA30-W1 firmware for Desigo PX automation controllers PXC128-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA30-W1 firmware for Desigo PX automation controllers PXC64-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA30-W2 firmware for Desigo PX automation controllers PXC00-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA30-W2 firmware for Desigo PX automation controllers PXC128-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA30-W2 firmware for Desigo PX automation controllers PXC64-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W0 firmware for Desigo PX automation controllers PXC00-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W0 firmware for Desigo PX automation controllers PXC100-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W0 firmware for Desigo PX automation controllers PXC200-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W0 firmware for Desigo PX automation controllers PXC50-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W1 firmware for Desigo PX automation controllers PXC00-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W1 firmware for Desigo PX automation controllers PXC100-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W1 firmware for Desigo PX automation controllers PXC200-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W1 firmware for Desigo PX automation controllers PXC50-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W2 firmware for Desigo PX automation controllers PXC00-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W2 firmware for Desigo PX automation controllers PXC100-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W2 firmware for Desigo PX automation controllers PXC200-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W2 firmware for Desigo PX automation controllers PXC50-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan