ICSA-18-317-07 Siemens SIMATIC IT Production Suite
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-13804US | high8.1 | — | ||
A vulnerability has been identified in SIMATIC IT LMS (All versions), SIMATIC IT Production Suite (Versions V7.1 < V7.1 Upd3), SIMATIC IT UA Discrete Manufacturing (Versions < V1.2… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (5)
- MitigationSIMATIC IT LMS
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC IT Production Suite
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to affected installations.
- MitigationSIMATIC IT UA Discrete Manufacturing
See recommendations from section Workaround and Mitigations
- BehobenSIMATIC IT Production Suite
Update to V7.1 Upd3. Contact Product Support to obtain the update. - Download: https://www.plm.automation.siemens.com/global/en/support/
https://www.plm.automation.siemens.com/global/en/support/ - BehobenSIMATIC IT UA Discrete Manufacturing
Versions V2.4 The latest V2.4 release containing SIMATIC IT Administrative Tools, SIMATIC IT Basic Service, and SIMATIC IT Full Services V7.1 Upd3 is available from GTAC Download. - Download: https://download.industrysoftware.automation.siemens.com/
https://download.industrysoftware.automation.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan