SSA-273799: Message Integrity Protection Bypass Vulnerability in SIMATIC Products
A message integrity protection bypass vulnerability has been identified in several SIMATIC products. The vulnerability could allow an attacker in a Man-in-the-Middle position to modify network traffic exchanged on port 102/tcp to PLCs of the SIMATIC S7-1200, SIMATIC S7-1500 and SIMATIC SoftwareController CPU families. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10929US | medium5.9OT elevated | — | ||
A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open… | ||||
references
External citations — patches, advisories, analysis.
remediations (10)
- No fix plannedSIMATIC CP 1626
Currently no fix is planned
- No fix plannedSIMATIC HMI Panel (incl. SIPLUS variants)
Currently no fix is planned
- No fix plannedSIMATIC NET PC Software V15
Currently no fix is planned
- FixedSIMATIC NET PC Software V14
Update to V14 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807351/ - FixedSIMATIC STEP 7 (TIA Portal)
Update to version V16
https://support.industry.siemens.com/cs/document/109772803/ - FixedSIMATIC WinCC (TIA Portal)
Update to version V16
https://support.industry.siemens.com/cs/document/109772803/ - FixedSIMATIC WinCC OA
Update to V3.16 P013 or later version
https://www.winccoa.com/downloads/category/versions-patches.html - FixedSIMATIC WinCC Runtime Advanced
Update to version V16
https://support.industry.siemens.com/cs/document/109771219/ - FixedSIMATIC WinCC Runtime Professional
Update to version V16
https://support.industry.siemens.com/cs/document/109771219/ - FixedTIM 1531 IRC (incl. SIPLUS NET variants)
Update to V2.1
https://support.industry.siemens.com/cs/document/109774204/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan