ICSA-19-134-02 Siemens SIMATIC WinCC and SIMATIC PCS 7
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-10922US | critical9.8OT erhöht | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 and newer (All versions), SIMATIC WinCC V7.2 and earlier (All versions), SI… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-705517: Remote Code Execution Vulnerability in SIMATIC WinCC and SIMATIC PCS 7self
- ICS Advisory ICSA-19-134-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-19-134-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationSIMATIC PCS 7 V8.0 and earlier
Apply recommendations from Section Workarounds and Mitigations, or upgrade to a newer version and enable "Encrypted Communication"
- MitigationSIMATIC PCS 7 V8.1 and newer
Enable "Encrypted Communication"
- MitigationSIMATIC WinCC V7.2 and earlier
Apply recommendations from Section Workarounds and Mitigations, or upgrade to a newer version and enable "Encrypted Communication"
- MitigationSIMATIC WinCC V7.3 and newer
Enable "Encrypted Communication". Starting with WinCC V7.5 "Encrypted Communication" is enabled by default
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan