ICSA-19-192-02 Siemens SIMATIC WinCC and PCS7 (Update C)
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-10935US | high7.2 | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-121293: Code Upload Vulnerability in SIMATIC WinCC and SIMATIC PCS 7self
- ICS Advisory ICSA-19-192-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-19-192-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (24)
- MitigationSIMATIC PCS 7 V8.0 and earlier
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC PCS 7 V8.1
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC PCS 7 V8.2
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC PCS 7 V9.0
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC Professional (TIA Portal V13)
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC Professional (TIA Portal V14)
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC Professional (TIA Portal V15)
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC Runtime Professional V13
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC Runtime Professional V14
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC Runtime Professional V15
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.2 and earlier
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC V7.3
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.4
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.5
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- BehobenSIMATIC PCS 7 V8.1
Update WinCC to V7.3 Upd 19 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768972
https://support.industry.siemens.com/cs/ww/en/view/109768972 - BehobenSIMATIC PCS 7 V8.2
Update WinCC to V7.4 SP1 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768093
https://support.industry.siemens.com/cs/ww/en/view/109768093 - BehobenSIMATIC PCS 7 V9.0
Update WinCC to V7.4 SP1 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768093
https://support.industry.siemens.com/cs/ww/en/view/109768093 - BehobenSIMATIC WinCC Professional (TIA Portal V14)
Update to V14 SP1 Upd 9 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747387
https://support.industry.siemens.com/cs/ww/en/view/109747387 - BehobenSIMATIC WinCC Professional (TIA Portal V15)
Update to V15.1 Upd 3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109763890
https://support.industry.siemens.com/cs/ww/en/view/109763890 - BehobenSIMATIC WinCC Runtime Professional V14
Update to V14.1 Upd 8 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747394
https://support.industry.siemens.com/cs/ww/en/view/109747394 - BehobenSIMATIC WinCC Runtime Professional V15
Update to V15.1 Upd 3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109763892
https://support.industry.siemens.com/cs/ww/en/view/109763892 - BehobenSIMATIC WinCC V7.3
Update to V7.3 Upd 19 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768972
https://support.industry.siemens.com/cs/ww/en/view/109768972 - BehobenSIMATIC WinCC V7.4
Update to V7.4 SP1 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768093
https://support.industry.siemens.com/cs/ww/en/view/109768093 - BehobenSIMATIC WinCC V7.5
Update to V7.5 Upd 3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109767227
https://support.industry.siemens.com/cs/ww/en/view/109767227
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan