ICSA-18-317-01 Siemens IEC 61850 System Configurator, DIGSI 5, DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, and SICAM SCC
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-4858US | high7.8 | — | ||
A vulnerability has been identified in IEC 61850 system configurator (All versions < V5.80), DIGSI 5 (affected as IEC 61850 system configurator is incorporated) (All versions < V7.… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-159860: Access Control Vulnerability in IEC 61850 system configurator, DIGSI 5,DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, and SICAM SCCself
- ICS Advisory ICSA-18-317-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-18-317-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (12)
- MitigationDIGSI 4
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,
- MitigationDIGSI 5 (affected as IEC 61850 system configurator is incorporated)
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,
- MitigationIEC 61850 system configurator
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,
- MitigationSICAM PAS/PQS
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,
- MitigationSICAM PQ Analyzer
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,
- MitigationSICAM SCC
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,
- BehobenDIGSI 4
Update to V4.93 - Download: https://support.industry.siemens.com/cs/ww/en/view/109740980
https://support.industry.siemens.com/cs/ww/en/view/109740980 - BehobenDIGSI 5 (affected as IEC 61850 system configurator is incorporated)
Uninstall IEC 61850 system configurator or update to V7.80 - Download: https://support.industry.siemens.com/cs/ww/en/view/109758531
https://support.industry.siemens.com/cs/ww/en/view/109758531 - BehobenIEC 61850 system configurator
Update to V5.80 - Download: https://support.industry.siemens.com/cs/ww/en/view/109740546
https://support.industry.siemens.com/cs/ww/en/view/109740546 - BehobenSICAM PAS/PQS
Update to V8.11 - Download: https://support.industry.siemens.com/cs/us/en/view/109757831
https://support.industry.siemens.com/cs/us/en/view/109757831 - BehobenSICAM PQ Analyzer
Update to V3.11 - Download: https://support.industry.siemens.com/cs/us/en/view/109757833
https://support.industry.siemens.com/cs/us/en/view/109757833 - BehobenSICAM SCC
Update to V9.02 HF3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745469
https://support.industry.siemens.com/cs/ww/en/view/109745469
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan