SSA-603476: Web Vulnerabilities in SIMATIC NET CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs
SIMATIC CP 343-1 Advanced/CP-443-1 Advanced devices and SIMATIC S7-300/S7-400 CPUs are affected by two vulnerabilities. One of the vulnerabilities could allow remote attackers to perform operations as an authenticated user under certain conditions. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-8673US | high8.8OT elevated | — | ||
A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 443-1 Advanced (incl. SIPLUS NET variant) (All vers… | ||||
| CVE-2016-8672US | medium5.3 | — | ||
A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 443-1 Advanced (incl. SIPLUS NET variant) (All vers… | ||||
references
External citations — patches, advisories, analysis.
- SSA-603476: Web Vulnerabilities in SIMATIC NET CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs - CSAF Versionself
- SSA-603476: Web Vulnerabilities in SIMATIC NET CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs - HTML Versionself
- SSA-603476: Web Vulnerabilities in SIMATIC NET CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs - PDF Versionself
- SSA-603476: Web Vulnerabilities in SIMATIC NET CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs - TXT Versionself
remediations (16)
- No fix plannedSIMATIC S7-400 PN/DP CPU family (incl. SIPLUS variants)
Currently no fix is planned
- No fix plannedSIMATIC S7-400 PN/DP CPU family (incl. SIPLUS variants)
Currently no fix is planned
- FixedSIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Update to V3.0.53 or any later version
https://support.industry.siemens.com/cs/ww/en/view/109742236 - FixedSIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Update to V3.0.53 or any later version
https://support.industry.siemens.com/cs/ww/en/view/109742236 - FixedSIMATIC CP 443-1 Advanced (incl. SIPLUS variants)
Update to V3.2.17 or any later version
https://support.industry.siemens.com/cs/ww/en/view/109745388 - FixedSIMATIC CP 443-1 Advanced (incl. SIPLUS variants)
Update to V3.2.17 or any later version
https://support.industry.siemens.com/cs/ww/en/view/109745388 - FixedSIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Update to V3.X.18 or later version
https://support.industry.siemens.com/cs/ww/en/ps/13752/dl - FixedSIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Update to V3.X.18 or later version
https://support.industry.siemens.com/cs/ww/en/ps/13752/dl - WorkaroundSIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Deactivate the webserver if not required, and if deactivation is supported by the product
- WorkaroundSIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Deactivate the webserver if not required, and if deactivation is supported by the product
- WorkaroundSIMATIC CP 443-1 Advanced (incl. SIPLUS variants)
Deactivate the webserver if not required, and if deactivation is supported by the product
- WorkaroundSIMATIC CP 443-1 Advanced (incl. SIPLUS variants)
Deactivate the webserver if not required, and if deactivation is supported by the product
- WorkaroundSIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Deactivate the webserver if not required, and if deactivation is supported by the product
- WorkaroundSIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Deactivate the webserver if not required, and if deactivation is supported by the product
- WorkaroundSIMATIC S7-400 PN/DP CPU family (incl. SIPLUS variants)
Deactivate the webserver if not required, and if deactivation is supported by the product
- WorkaroundSIMATIC S7-400 PN/DP CPU family (incl. SIPLUS variants)
Deactivate the webserver if not required, and if deactivation is supported by the product
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan