Siemens SIMOTICS, Desigo, APOGEE, and TALON
SIMOTICS CONNECT 400, Desigo (Power PC-based), APOGEE MEC/MBC/PXC and TALON TC products are affected by a DHCP Client vulnerability as initially reported in SSA-434032 for the Mentor Nucleus Networking Module. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-13939US | medium4.8 | — | ||
A vulnerability has been identified in APOGEE MEC/MBC/PXC (P2) (All versions < V2.8.2), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All v… | ||||
references
External citations — patches, advisories, analysis.
- SSA-162506: DHCP Client Vulnerability in SIMOTICS CONNECT 400, Desigo PXC/PXM, APOGEE MEC/MBC/PXC, APOGEE PXC Series, and TALON TC Series - CSAF Versionself
- SSA-162506: DHCP Client Vulnerability in SIMOTICS CONNECT 400, Desigo PXC/PXM, APOGEE MEC/MBC/PXC, APOGEE PXC Series, and TALON TC Series - HTML Versionself
- ICS Advisory ICSA-20-105-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-105-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (42)
- MitigationAPOGEE MEC/MBC/PXC (P2)
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationAPOGEE PXC Compact (BACnet)
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationAPOGEE PXC Compact (P2 Ethernet)
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationAPOGEE PXC Modular (BACnet)
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationAPOGEE PXC Modular (P2 Ethernet)
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC00-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC00-U
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC001-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC100-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC12-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC128-U
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC200-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC22-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC22.1-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC36.1-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC50-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC64-U
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXM20-E
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationSIMOTICS CONNECT 400
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationTALON TC Compact (BACnet)
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationTALON TC Modular (BACnet)
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- No fix plannedAPOGEE MEC/MBC/PXC (P2)
Currently no fix is planned
- FixedAPOGEE PXC Compact (BACnet)
Update to V3.5.3 or later version
https://partnerportal.extranet.dc.siemens.com/ - FixedAPOGEE PXC Compact (P2 Ethernet)
Update to V2.8.19 or later version
https://partnerportal.extranet.dc.siemens.com/ - FixedAPOGEE PXC Modular (BACnet)
Update to V3.5.3 or later version
https://partnerportal.extranet.dc.siemens.com/ - FixedAPOGEE PXC Modular (P2 Ethernet)
Update to V2.8.19 or later version
https://partnerportal.extranet.dc.siemens.com/ - FixedDesigo PXC00-E.D
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - FixedDesigo PXC00-U
Update to V6.00.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - FixedDesigo PXC001-E.D
Update to V6.00.327 or later version
- FixedDesigo PXC100-E.D
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - FixedDesigo PXC12-E.D
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - FixedDesigo PXC128-U
Update to V6.00.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - FixedDesigo PXC200-E.D
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - FixedDesigo PXC22-E.D
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - FixedDesigo PXC22.1-E.D
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - FixedDesigo PXC36.1-E.D
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - FixedDesigo PXC50-E.D
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - FixedDesigo PXC64-U
Update to V6.00.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - FixedDesigo PXM20-E
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - FixedSIMOTICS CONNECT 400
Update to V0.3.0.330 or later version
https://support.industry.siemens.com/cs/ww/en/view/109778383/ - FixedTALON TC Compact (BACnet)
Update to V3.5.3 or later version
https://partnerportal.extranet.dc.siemens.com/ - FixedTALON TC Modular (BACnet)
Update to V3.5.3 or later version
https://partnerportal.extranet.dc.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan