SSA-968170: Remote Code Execution Vulnerability in SIMATIC STEP 7 V5.x and Derived Products
SIMATIC STEP 7 and PCS 7 contain a database management system that could allow remote users to use embedded functions of the database (local or in a network share) that have impact on the server. An attacker with network access to the server network could leverage these embedded functions to run code in the database management system's server (where STEP 7 or PCS 7 are running). Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-25910US | high8.8 | — | ||
A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All versions < V5.7 SP2 HF1), SIMAT… | ||||
references
External citations — patches, advisories, analysis.
- SSA-968170: Remote Code Execution Vulnerability in SIMATIC STEP 7 V5.x and Derived Products - CSAF Versionself
- SSA-968170: Remote Code Execution Vulnerability in SIMATIC STEP 7 V5.x and Derived Products - HTML Versionself
- SSA-968170: Remote Code Execution Vulnerability in SIMATIC STEP 7 V5.x and Derived Products - PDF Versionself
- SSA-968170: Remote Code Execution Vulnerability in SIMATIC STEP 7 V5.x and Derived Products - TXT Versionself
remediations (9)
- MitigationSIMATIC PCS 7
If multiple Engineering Systems are in use ensure that the user accounts in use are restricted to the minimum required operating rights
- MitigationSIMATIC S7-PM
If multiple Engineering Systems are in use ensure that the user accounts in use are restricted to the minimum required operating rights
- MitigationSIMATIC STEP 7 V5
If multiple Engineering Systems are in use ensure that the user accounts in use are restricted to the minimum required operating rights
- FixedSIMATIC PCS 7
Update to V9.1 SP2 UC04 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812242/ - FixedSIMATIC S7-PM
Update to V5.7 SP2 HF1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109827552/ - FixedSIMATIC STEP 7 V5
Update to V5.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794088/ - WorkaroundSIMATIC PCS 7
If only one Engineering System is in use, consider changing to "Single terminal system" mode in the "Configure SIMATIC Workspace/Workstation" application, under the "Workstation Configuration" tab. Restart the computer. More details can be found in the following FAQ: https://support.industry.siemens.com/cs/ww/en/view/109821340/
- WorkaroundSIMATIC S7-PM
If only one Engineering System is in use, consider changing to "Single terminal system" mode in the "Configure SIMATIC Workspace/Workstation" application, under the "Workstation Configuration" tab. Restart the computer. More details can be found in the following FAQ: https://support.industry.siemens.com/cs/ww/en/view/109821340/
- WorkaroundSIMATIC STEP 7 V5
If only one Engineering System is in use, consider changing to "Single terminal system" mode in the "Configure SIMATIC Workspace/Workstation" application, under the "Workstation Configuration" tab. Restart the computer. More details can be found in the following FAQ: https://support.industry.siemens.com/cs/ww/en/view/109821340/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan