ICSA-17-306-01

icsaUScisa_csaf_ot

ICSA-17-306-01 Siemens SIMATIC PCS 7 (Update A)

Advisory ansehen veröffentlicht 2017-10-18

CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2017-6867USmedium4.9—
A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 before SP2 and V14 before SP1), SIMATIC Wi…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (3)

  • MitigationSIMATIC PCS 7 V8.1

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSIMATIC PCS 7 V8.2

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • BehobenSIMATIC PCS 7 V8.1

    Update WinCC to V7.3 Upd 13 - Download: https://support.industry.siemens.com/cs/ww/en/view/109746452

    https://support.industry.siemens.com/cs/ww/en/view/109746452
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan