Siemens Industrial Products
Several industrial products contain an out of bounds read vulnerability that could allow an attacker to cause a Blue Screen of Death (BSOD) crash of the underlying Windows kernel, leading to denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-46280US | — | — | ||
A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All versions < V5.0 SP2), SIMATIC BATCH V9.1 (All versions < V9.1… | ||||
references
External citations — patches, advisories, analysis.
- SSA-962515: Out of Bounds Read Vulnerability in Industrial Products - CSAF Versionself
- SSA-962515: Out of Bounds Read Vulnerability in Industrial Products - HTML Versionself
- ICS Advisory ICSA-24-137-13 JSONself
- ICS Advisory ICSA-24-137-13 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (32)
- No fix plannedSIMATIC NET PC Software V17
Currently no fix is planned
- No fix plannedSIMATIC WinCC OA V3.17
Currently no fix is planned
- No fix plannedSIMATIC WinCC V7.4
Currently no fix is planned
- No fix plannedSecurity Configuration Tool (SCT)
Currently no fix is planned
- No fix plannedTotally Integrated Automation Portal (TIA Portal) V15.1
Currently no fix is planned
- No fix plannedTotally Integrated Automation Portal (TIA Portal) V16
Currently no fix is planned
- FixedSIMATIC Automation Tool
Update to V5.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/98161300/ - FixedSIMATIC BATCH V9.1
Update to V9.1 SP2 Upd5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812242/ - FixedSIMATIC NET PC Software V16
Update to V16 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974091/ - FixedSIMATIC NET PC Software V18
Update to V18 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972655/ - FixedSIMATIC NET PC Software V19
Update to V19 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975600/ - FixedSIMATIC PCS 7 V9.1
Update to V9.1 SP2 UC05 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812242/ - FixedSIMATIC PDM V9.2
Update to V9.2 SP2 Upd3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812242/ - FixedSIMATIC Route Control V9.1
Update to V9.1 SP2 Upd3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812242/ - FixedSIMATIC S7-PCT
Update to V3.5 SP3 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/32469496/ - FixedSIMATIC STEP 7 V5
Update to V5.7 SP3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109973519/ - FixedSIMATIC WinCC OA V3.18
Update to V3.18 P025 or later version
https://www.winccoa.com/downloads/category/versions-patches.html - FixedSIMATIC WinCC OA V3.19
Update to V3.19 P010 or later version
https://www.winccoa.com/downloads/category/versions-patches.html - FixedSIMATIC WinCC Runtime Advanced
Update to V17 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800912/ - FixedSIMATIC WinCC Runtime Professional V16
Update to V16 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776017/ - FixedSIMATIC WinCC Runtime Professional V17
Update to V17 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800913/ - FixedSIMATIC WinCC Runtime Professional V18
Update to V18 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807225/ - FixedSIMATIC WinCC Runtime Professional V19
Update to V19 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109820999/ - FixedSIMATIC WinCC V7.5
Update to V7.5 SP2 Update 17 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793460/ - FixedSIMATIC WinCC V8.0
Update to V8.0 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109818723/ - FixedSINAMICS Startdrive
Update to V19 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109963196/ - FixedSINUMERIK ONE virtual
Update to V6.23 or later version
- FixedSINUMERIK PLC Programming Tool
Update to V3.3.12 or later version PLC Programming Tool V3.3.12 or later versions are integrated in SINUMERIK 828D Toolbox version V5.24 or later; Updated software version can be obtained from Siemens customer support or a local partner.
- FixedTIA Portal Cloud Connector
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780755/ - FixedTotally Integrated Automation Portal (TIA Portal) V17
Update to V17 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800912/ - FixedTotally Integrated Automation Portal (TIA Portal) V18
Update to V18 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/ - FixedTotally Integrated Automation Portal (TIA Portal) V19
Update to V19 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan