SSA-535640

csafDEsiemens_psirt

SSA-535640: Vulnerability in Industrial Products

view advisory published 2017-08-30

Various industrial products use the Discovery Service of the OPC UA protocol stack by the OPC foundation https://github.com/OPCFoundation/UA-.NETStandard and could therefore be affected by the remote resource consumption attacks (CVE-2017-12069).

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2017-12069UShigh8.2—
An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server (LDS) before 1.03.367. Among the affected products are S…
02

references

External citations — patches, advisories, analysis.

03

remediations (12)

  • MitigationSIMATIC IT Production Suite

    Turn off the Discovery Service after commissioning or block it on the local firewall: https://support.industry.siemens.com/cs/ww/en/view/109749461

  • MitigationSIMATIC NET PC Software V14

    Turn off the Discovery Service after commissioning or block it on the local firewall: https://support.industry.siemens.com/cs/ww/en/view/109749461

  • MitigationSIMATIC PCS 7

    Turn off the Discovery Service after commissioning or block it on the local firewall: https://support.industry.siemens.com/cs/ww/en/view/109749461

  • MitigationSIMATIC WinCC

    Turn off the Discovery Service after commissioning or block it on the local firewall: https://support.industry.siemens.com/cs/ww/en/view/109749461

  • MitigationSIMATIC WinCC Runtime Professional V13

    Turn off the Discovery Service after commissioning or block it on the local firewall: https://support.industry.siemens.com/cs/ww/en/view/109749461

  • MitigationSIMATIC WinCC Runtime Professional V14

    Turn off the Discovery Service after commissioning or block it on the local firewall: https://support.industry.siemens.com/cs/ww/en/view/109749461

  • No fix plannedSIMATIC PCS 7

    Currently no fix is planned

  • No fix plannedSIMATIC WinCC

    Currently no fix is planned

  • No fix plannedSIMATIC WinCC Runtime Professional V13

    Currently no fix is planned

  • FixedSIMATIC IT Production Suite

    Update to V7.1 or later version

  • FixedSIMATIC NET PC Software V14

    Update to V14 SP1 Update 14 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109807351/
  • FixedSIMATIC WinCC Runtime Professional V14

    Update to V14 SP1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109746276
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan