SSA-730482: Denial of Service Vulnerability in SIMATIC WinCC
A vulnerability in the login dialog box of SIMATIC WinCC could allow a local attacker to cause a denial of service condition in the runtime of the SCADA system. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-50821US | — | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC04), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Update 8), SIMATIC WinCC Runtim… | ||||
references
External citations — patches, advisories, analysis.
remediations (12)
- MitigationSIMATIC PCS 7 V9.1
Activate SIMATIC Logon in the User Administrator of the SIMATIC PCS 7 Operator Stations
- MitigationSIMATIC WinCC Runtime Professional V17
Activate SIMATIC Logon in the User Administrator of the SIMATIC PCS 7 Operator Stations
- MitigationSIMATIC WinCC Runtime Professional V18
Activate SIMATIC Logon in the User Administrator of the SIMATIC PCS 7 Operator Stations
- MitigationSIMATIC WinCC Runtime Professional V19
Activate SIMATIC Logon in the User Administrator of the SIMATIC PCS 7 Operator Stations
- MitigationSIMATIC WinCC V7.5
Activate SIMATIC Logon in the User Administrator of the SIMATIC PCS 7 Operator Stations
- MitigationSIMATIC WinCC V8.0
Activate SIMATIC Logon in the User Administrator of the SIMATIC PCS 7 Operator Stations
- FixedSIMATIC PCS 7 V9.1
Update to V9.1 SP2 UC04 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812242/ - FixedSIMATIC WinCC Runtime Professional V17
Update to V17 Update 8 or later version
- FixedSIMATIC WinCC Runtime Professional V18
Update to V18 Update 4 or later version
- FixedSIMATIC WinCC Runtime Professional V19
Update to V19 Update 1 or later version
- FixedSIMATIC WinCC V7.5
Update to V7.5 SP2 Update 16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793460/ - FixedSIMATIC WinCC V8.0
Update to V8.0 Update 5 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan