ICSA-17-187-03F Siemens SIPROTEC 4 and SIPROTEC Compact (Update F)
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2016-7114US | high8.8OT erhöht | — | ||
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All… | ||||
| CVE-2016-7113US | high7.5 | — | ||
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All… | ||||
| CVE-2016-7112US | critical9.8OT erhöht | — | ||
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All… | ||||
| CVE-2016-4785US | medium5.3OT erhöht | — | ||
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All… | ||||
| CVE-2016-4784US | medium5.3OT erhöht | — | ||
A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All… | ||||
| CVE-2015-5374US | high7.8 | Exploit | ||
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-323211: Vulnerabilities in SIPROTEC 4 and SIPROTEC Compact Devicesself
- ICS Advisory ICSA-17-187-03F JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-17-187-03F - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (80)
- MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80
Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com
- MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80
Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com
- MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80
Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com
- MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80
Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com
- MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80
Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com
- MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80
Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com
- MitigationFirmware variant DNP3 TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant DNP3 TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant DNP3 TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant DNP3 TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant DNP3 TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant DNP3 TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant IEC 104 for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant IEC 104 for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant IEC 104 for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant IEC 104 for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant IEC 104 for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant IEC 104 for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant Modbus TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant Modbus TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant Modbus TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant Modbus TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant Modbus TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant Modbus TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant PROFINET IO for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant PROFINET IO for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant PROFINET IO for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant PROFINET IO for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant PROFINET IO for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant PROFINET IO for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SD686
Install V 4.03 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=64
- MitigationSIPROTEC 7SD686
Install V4.05 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=64
- MitigationSIPROTEC 7SD686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SD686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SD686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SD686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ66
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ66
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ66
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ66
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ66
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ66
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ686
Install V 4.83 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=51
- MitigationSIPROTEC 7SJ686
Install V 4.87 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=51
- MitigationSIPROTEC 7SJ686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7UT686
Install V 4.01 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=68
- MitigationSIPROTEC 7UT686
Install V4.02 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=68
- MitigationSIPROTEC 7UT686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7UT686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7UT686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7UT686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- BehobenFirmware variant DNP3 TCP for EN100 Ethernet module
Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant DNP3 TCP for EN100 Ethernet module
Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant DNP3 TCP for EN100 Ethernet module
Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant DNP3 TCP for EN100 Ethernet module
Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant DNP3 TCP for EN100 Ethernet module
Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant DNP3 TCP for EN100 Ethernet module
Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant IEC 104 for EN100 Ethernet module
Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant IEC 104 for EN100 Ethernet module
Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant IEC 104 for EN100 Ethernet module
Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant IEC 104 for EN100 Ethernet module
Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant IEC 104 for EN100 Ethernet module
Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant IEC 104 for EN100 Ethernet module
Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant Modbus TCP for EN100 Ethernet module
Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant Modbus TCP for EN100 Ethernet module
Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant Modbus TCP for EN100 Ethernet module
Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant Modbus TCP for EN100 Ethernet module
Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant Modbus TCP for EN100 Ethernet module
Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant Modbus TCP for EN100 Ethernet module
Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant PROFINET IO for EN100 Ethernet module
Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant PROFINET IO for EN100 Ethernet module
Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant PROFINET IO for EN100 Ethernet module
Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant PROFINET IO for EN100 Ethernet module
Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant PROFINET IO for EN100 Ethernet module
Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenFirmware variant PROFINET IO for EN100 Ethernet module
Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenSIPROTEC 7SJ66
Install V 4.20 - Download: https://support.industry.siemens.com/cs/gb/en/view/109743555
https://support.industry.siemens.com/cs/gb/en/view/109743555 - BehobenSIPROTEC 7SJ66
Install V 4.30 - Download: https://support.industry.siemens.com/cs/us/en/view/109743555
https://support.industry.siemens.com/cs/us/en/view/109743555
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan