SSA-534763

csafDEsiemens_psirt

SSA-534763: Special Register Buffer Data Sampling (SRBDS) aka Crosstalk in Industrial Products

view advisory published 2020-09-08

Security researchers published information on a vulnerability known as Crosstalk (INTEL-SA-00320). This vulnerability affects modern Intel processors to a varying degree. Several Siemens Industrial Products contain processors that are affected by the vulnerability. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2020-0543USmedium5.5—
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local…
02

references

External citations — patches, advisories, analysis.

03

remediations (50)

  • MitigationSIMATIC Field PG M4

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC Field PG M5

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC Field PG M6

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC3000 SMART V2

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC347E

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC427D (incl. SIPLUS variants)

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC427E (incl. SIPLUS variants)

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC477D

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC477E

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC477E Pro

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC527G

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC547E

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC547G

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC627D

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC627E

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC647D

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC647E

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC677D

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC677E

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC827D

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC847D

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC847E

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC ITP1000

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMOTION P320-4E

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • MitigationSIMOTION P320-4S

    Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity

  • No fix plannedSIMATIC Field PG M4

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC347E

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC427D (incl. SIPLUS variants)

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC477D

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC547E

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC627D

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC647D

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC677D

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC827D

    Currently no remediation is planned

  • No fix plannedSIMATIC IPC847D

    Currently no remediation is planned

  • No fix plannedSIMOTION P320-4E

    Currently no remediation is planned

  • No fix plannedSIMOTION P320-4S

    Currently no remediation is planned

  • FixedSIMATIC Field PG M5

    Update BIOS to V22.01.08

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC Field PG M6

    Update BIOS to V26.01.07

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC3000 SMART V2

    Update BIOS to V1.B or later version

    https://support.industry.siemens.com/cs/cn/en/view/109763408/
  • FixedSIMATIC IPC427E (incl. SIPLUS variants)

    Update BIOS to V21.01.14

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC477E

    Update BIOS to V21.01.14

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC477E Pro

    Update BIOS to V21.01.14

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC527G

    Update BIOS to V1.4.0

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC547G

    Update BIOS to R1.28.0

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC627E

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC647E

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC677E

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC IPC847E

    Update BIOS to V25.02.06

    https://support.industry.siemens.com/cs/ww/en/view/109763408
  • FixedSIMATIC ITP1000

    Update BIOS to V23.01.08

    https://support.industry.siemens.com/cs/ww/en/view/109763408
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan