Siemens SIMATIC STEP 7 DLL Vulnerability
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-3015US | medium6.9 | — | ||
Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local users to gain privileges v… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-12-205-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-12-205-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationSIMATIC PCS 7
Siemens has provided the STEP 7 software update V5.5 SP1 (equivalent to V5.5.1) that resolves the vulnerability, but recommends that the latest Service Pack, V5.5 SP2,Service Pack 2 for STEP 7 V5.5 and STEP 7 Professional 2010, (http://support.automation.siemens.com/WW/view/en/57026339). be installed as soon as possible. SIMATIC PCS 7 users should also apply this update.
http://support.automation.siemens.com/WW/view/en/57026339 - MitigationSIMATIC STEP 7
Siemens has provided the STEP 7 software update V5.5 SP1 (equivalent to V5.5.1) that resolves the vulnerability, but recommends that the latest Service Pack, V5.5 SP2,Service Pack 2 for STEP 7 V5.5 and STEP 7 Professional 2010, (http://support.automation.siemens.com/WW/view/en/57026339). be installed as soon as possible. SIMATIC PCS 7 users should also apply this update.
http://support.automation.siemens.com/WW/view/en/57026339
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan