SSA-363107: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode
A vulnerability was found in SIMATIC WinCC that could allow authenticated attackers to escape the Kiosk Mode. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-24287US | medium4.6OT elevated | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1 UC01), SIMA… | ||||
references
External citations — patches, advisories, analysis.
- SSA-363107: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode - CSAF Versionself
- SSA-363107: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode - HTML Versionself
- SSA-363107: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode - PDF Versionself
- SSA-363107: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode - TXT Versionself
remediations (16)
- MitigationSIMATIC PCS 7 V8.2
At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system
- MitigationSIMATIC PCS 7 V9.0
At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system
- MitigationSIMATIC PCS 7 V9.1
At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system
- MitigationSIMATIC WinCC Runtime Professional V16 and earlier
At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system
- MitigationSIMATIC WinCC Runtime Professional V17
At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system
- MitigationSIMATIC WinCC V7.3
At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system
- MitigationSIMATIC WinCC V7.4
At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system
- MitigationSIMATIC WinCC V7.5
At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system
- No fix plannedSIMATIC PCS 7 V8.2
Currently no fix is planned
- No fix plannedSIMATIC WinCC Runtime Professional V16 and earlier
Currently no fix is planned
- No fix plannedSIMATIC WinCC V7.3
Currently no fix is planned
- FixedSIMATIC PCS 7 V9.0
Update SIMATIC WinCC to V7.4 SP 1 Update 21 or later version
- FixedSIMATIC PCS 7 V9.1
Update to V9.1 SP1 UC01 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805072/ - FixedSIMATIC WinCC Runtime Professional V17
Update to V17 Upd4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800913/ - FixedSIMATIC WinCC V7.4
Update to V7.4 SP1 Update 21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109806846/ - FixedSIMATIC WinCC V7.5
Update to V7.5 SP2 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793460/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan