ICSA-18-023-02 Siemens Industrial Products (Update A)
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-2680US | medium6.5 | — | ||
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (16)
- MitigationExtension Unit 12" PROFINET
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply cell protection concept.
- MitigationExtension Unit 15" PROFINET
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply cell protection concept.
- MitigationExtension Unit 19" PROFINET
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply cell protection concept.
- MitigationExtension Unit 22" PROFINET
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply cell protection concept.
- MitigationSIMATIC CP 1242-7 GPRS V2
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply cell protection concept.
- MitigationSIMATIC CP 1243-7 LTE/US
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply cell protection concept.
- MitigationSIMATIC CP 1243-8
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply cell protection concept.
- MitigationSIMATIC CP 1626
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply cell protection concept.
- BehobenExtension Unit 12" PROFINET
Update to V01.01.01 - Download: https://support.industry.siemens.com/cs/de/en/view/109750351
https://support.industry.siemens.com/cs/de/en/view/109750351 - BehobenExtension Unit 15" PROFINET
Update to V01.01.01 - Download: https://support.industry.siemens.com/cs/de/en/view/109750351
https://support.industry.siemens.com/cs/de/en/view/109750351 - BehobenExtension Unit 19" PROFINET
Update to V01.01.01 - Download: https://support.industry.siemens.com/cs/de/en/view/109750351
https://support.industry.siemens.com/cs/de/en/view/109750351 - BehobenExtension Unit 22" PROFINET
Update to V01.01.01 - Download: https://support.industry.siemens.com/cs/de/en/view/109750351
https://support.industry.siemens.com/cs/de/en/view/109750351 - BehobenSIMATIC CP 1242-7 GPRS V2
Update to V2.1.82 - Download: https://support.industry.siemens.com/cs/ww/en/view/109749515
https://support.industry.siemens.com/cs/ww/en/view/109749515 - BehobenSIMATIC CP 1243-7 LTE/US
Update to V2.1.82 - Download: https://support.industry.siemens.com/cs/ww/en/view/109749515
https://support.industry.siemens.com/cs/ww/en/view/109749515 - BehobenSIMATIC CP 1243-8
Update to V2.1.82 - Download: https://support.industry.siemens.com/cs/ww/en/view/109749515
https://support.industry.siemens.com/cs/ww/en/view/109749515 - BehobenSIMATIC CP 1626
Update to V1.1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109763307
https://support.industry.siemens.com/cs/ww/en/view/109763307
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan