ICSA-18-226-01 Siemens SIMATIC STEP 7 and SIMATIC WinCC (Update A)
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-11454US | high8.6OT erhöht | — | ||
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13 (All… | ||||
| CVE-2018-11453US | high7.8OT erhöht | — | ||
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13 (All… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-979106: Vulnerabilities in SIMATIC STEP 7 (TIA Portal) and SIMATIC WinCC (TIAPortal)self
- ICS Advisory ICSA-18-226-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-18-226-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (16)
- MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.
- MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.
- MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.
- MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.
- MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.
- MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.
- MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.
- MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.
- BehobenSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12
Upgrade to V13 SP2 Update 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109759753
https://support.industry.siemens.com/cs/ww/en/view/109759753 - BehobenSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12
Upgrade to V13 SP2 Update 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109759753
https://support.industry.siemens.com/cs/ww/en/view/109759753 - BehobenSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13
Update to V13 SP2 Update 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109759753
https://support.industry.siemens.com/cs/ww/en/view/109759753 - BehobenSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13
Update to V13 SP2 Update 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109759753
https://support.industry.siemens.com/cs/ww/en/view/109759753 - BehobenSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14
Update to V14 SP1 Update 6 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747387
https://support.industry.siemens.com/cs/ww/en/view/109747387 - BehobenSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14
Update to V14 SP1 Update 6 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747387
https://support.industry.siemens.com/cs/ww/en/view/109747387 - BehobenSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15
Update to V15 Update 2 or newer - Download: https://support.industry.siemens.com/cs/ww/en/view/109755826
https://support.industry.siemens.com/cs/ww/en/view/109755826 - BehobenSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15
Update to V15 Update 2 or newer - Download: https://support.industry.siemens.com/cs/ww/en/view/109755826
https://support.industry.siemens.com/cs/ww/en/view/109755826
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan