SSA-535997: Cleartext Storage of Sensitive Information in Multiple SIMATIC Products
view advisory published 2021-09-14
A cleartext vulnerability was found in the SIMATIC communication processors CP 1543-1 and CP 1545-1 that could allow an attacker to read sensitive information. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-33716US | medium6.5OT elevated | — | ||
A vulnerability has been identified in SIMATIC CP 1543-1 (incl. SIPLUS variants) (All versions < V3.0), SIMATIC CP 1545-1 (All versions < V1.1). An attacker with access to the subn… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-535997: Cleartext Storage of Sensitive Information in Multiple SIMATIC Products - CSAF Versionself
- SSA-535997: Cleartext Storage of Sensitive Information in Multiple SIMATIC Products - PDF Versionself
- SSA-535997: Cleartext Storage of Sensitive Information in Multiple SIMATIC Products - TXT Versionself
03
remediations (2)
- FixedSIMATIC CP 1543-1 (incl. SIPLUS variants)
After migrating the project successfully, compilation and download to the device is required.
https://support.industry.siemens.com/cs/ww/en/view/109800773/ - FixedSIMATIC CP 1545-1
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan