SSA-307392: Denial of Service in OPC UA in Industrial Products
A vulnerability has been identified in the OPC UA server of several industrial products. The vulnerability could cause a denial of service condition on the service or the device. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-6575US | high7.5 | — | ||
A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.7), SIMATI… | ||||
references
External citations — patches, advisories, analysis.
remediations (38)
- MitigationSIMATIC CP 443-1 OPC UA
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC IPC DiagMonitor
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC NET PC Software V13
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC NET PC Software V14
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC NET PC Software V15
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC RF188C
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC RF600R family
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC S7-1500 Software Controller
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC WinCC OA
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC WinCC Runtime Advanced
Deactivate the OPC UA Service if supported by the product
- MitigationSINEC NMS
Deactivate the OPC UA Service if supported by the product
- MitigationSINEMA Server
Deactivate the OPC UA Service if supported by the product
- MitigationSINUMERIK OPC UA Server
Deactivate the OPC UA Service if supported by the product
- MitigationTeleControl Server Basic
Deactivate the OPC UA Service if supported by the product
- No fix plannedSIMATIC CP 443-1 OPC UA
Currently no fix is planned
- No fix plannedSIMATIC NET PC Software V13
Currently no fix is planned
- No fix plannedSIMATIC NET PC Software V15
Currently no fix is planned
- FixedSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
Update to V2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759122 - FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Update to V15.1 Upd4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763890 - FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Update to V15.1 Upd4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763890 - FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Update to V15.1 Upd4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763890 - FixedSIMATIC IPC DiagMonitor
Update to V5.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763202 - FixedSIMATIC NET PC Software V14
Update to V14 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807351/ - FixedSIMATIC RF188C
Update to V1.1.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109768507 - FixedSIMATIC RF600R family
Update to V3.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109768501 - FixedSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Update to V2.6.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/ - FixedSIMATIC S7-1500 Software Controller
Update to V2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478528 - FixedSIMATIC WinCC OA
Update to V3.15 P018 or later version
https://www.winccoa.com/downloads/category/versions- patches.html - FixedSIMATIC WinCC Runtime Advanced
Update to V15.1 Upd 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763891 - FixedSINEC NMS
Update to V1.0 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776939 - FixedSINEMA Server
Update to V14 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109767382 - FixedSINUMERIK OPC UA Server
Update to V2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746207 - FixedTeleControl Server Basic
Update to V3.1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812231/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan