SSA-661034: Incorrect Permission Assignment in Multiple SIMATIC Software Products
Multiple SIMATIC software products are affected by a vulnerability that could allow an attacker to change the content of certain metafiles and subsequently manipulate parameters or behaviour of devices configured by the affected software products. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-31894US | high8.8 | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions < V9.1 SP2), SIMATIC PDM (All versions < V9.2 SP2), SIMATIC S… | ||||
references
External citations — patches, advisories, analysis.
remediations (10)
- MitigationSIMATIC PCS 7 V8.2 and earlier
Restrict access on the engineering station to trusted users only
- MitigationSIMATIC PCS 7 V9.X
Restrict access on the engineering station to trusted users only
- MitigationSIMATIC PDM
Restrict access on the engineering station to trusted users only
- MitigationSIMATIC STEP 7 V5.X
Restrict access on the engineering station to trusted users only
- MitigationSINAMICS STARTER (containing STEP 7 OEM version)
Restrict access on the engineering station to trusted users only
- No fix plannedSIMATIC PCS 7 V8.2 and earlier
Currently no fix is planned
- FixedSIMATIC PCS 7 V9.X
Update to V9.1 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812240/ - FixedSIMATIC PDM
Update to V9.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811911/ - FixedSIMATIC STEP 7 V5.X
Update to V5.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794088/ - FixedSINAMICS STARTER (containing STEP 7 OEM version)
Update to V5.4 SP2 HF1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800526/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan