ICSA-17-045-03 Siemens SIMATIC Authentication Bypass (Update D)
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-2684US | critical9.0 | — | ||
Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the a… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- BehobenSIMATIC IT Production Suite
Install SIMATIC Logon update (can be installed without IT Production Suite update, see compatibility note on download page) - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966 - BehobenSIMATIC Logon
Update to V1.5 SP3 Update 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966 - BehobenSIMATIC PCS 7
Install SIMATIC Logon update (can be installed without PCS 7 update, see compatibility note on download page) - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966 - BehobenSIMATIC PDM
Install SIMATIC Logon update (can be installed without PDM update, see compatibility note on download page) - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966 - BehobenSIMATIC WinCC
Install SIMATIC Logon update (can be installed without WinCC update, see compatibility note on download page) - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966 - BehobenSIMATIC WinCC Runtime Professional
Install SIMATIC Logon update (can be installed without WinCC Runtime Professional update, see compatibility note on download page) - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan