ICSA-17-129-01 Siemens devices using the PROFINET Discovery and Configuration Protocol (Update K)
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-6865US | medium6.5 | — | ||
A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions < V1… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (39)
- MitigationPrimary Setup Tool (PST)
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC Automation Tool
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC NET PC-Software
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC PCS 7 V8.1 and earlier versions
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC PCS 7 V8.2
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC STEP 7 (TIA Portal) V13
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC STEP 7 (TIA Portal) V14
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC STEP 7 V5.X
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinAC RTX (F) 2010 SP2
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC (TIA Portal) V13
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC (TIA Portal) V14
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.2 and prior
See recommendations from section Workaround and Mitigations
- MitigationSIMATIC WinCC V7.3
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC V7.4
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSIMATIC WinCC flexible 2008
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSINAUT ST7CC
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSINEMA Server
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSINUMERIK 808D Programming Tool
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSMART PC Access
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSTEP 7 - Micro/WIN SMART
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- MitigationSecurity Configuration Tool (SCT)
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
- BehobenPrimary Setup Tool (PST)
Update to V4.2 HF1 - Download: https://support.industry.siemens.com/cs/ww/en/view/19440762
https://support.industry.siemens.com/cs/ww/en/view/19440762 - BehobenSIMATIC Automation Tool
Update to V3.0 - Download: https://support.industry.siemens.com/cs/ww/en/view/98161300
https://support.industry.siemens.com/cs/ww/en/view/98161300 - BehobenSIMATIC NET PC-Software
Upgrade to V14 SP1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747482
https://support.industry.siemens.com/cs/ww/en/view/109747482 - BehobenSIMATIC PCS 7 V8.1 and earlier versions
See recommendations from section Workarounds and Mitigations, or upgrade to V9.0 - Download: https://www.siemens.de/automation/partner
https://www.siemens.de/automation/partner - BehobenSIMATIC STEP 7 (TIA Portal) V13
Update to V13 SP 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745155
https://support.industry.siemens.com/cs/ww/en/view/109745155 - BehobenSIMATIC STEP 7 (TIA Portal) V14
Update to V14 SP 1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745984
https://support.industry.siemens.com/cs/ww/en/view/109745984 - BehobenSIMATIC STEP 7 V5.X
Update to V5.6 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747706
https://support.industry.siemens.com/cs/ww/en/view/109747706 - BehobenSIMATIC WinAC RTX (F) 2010 SP2
Update to SIMATIC WinAC RTX 2010 SP3 and apply BIOS and Microsoft Windows updates - Download: https://support.industry.siemens.com/cs/ww/en/view/109765109
https://support.industry.siemens.com/cs/ww/en/view/109765109 - BehobenSIMATIC WinCC (TIA Portal) V13
Update to V13 SP2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109746073
https://support.industry.siemens.com/cs/ww/en/view/109746073 - BehobenSIMATIC WinCC (TIA Portal) V14
Update to V14 SP 1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745460
https://support.industry.siemens.com/cs/ww/en/view/109745460 - BehobenSIMATIC WinCC V7.3
Update to V7.3 Update 15 - Download: https://support.industry.siemens.com/cs/ww/en/view/109750182
https://support.industry.siemens.com/cs/ww/en/view/109750182 - BehobenSIMATIC WinCC V7.4
Update to V7.4 SP1 Upd1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109748024
https://support.industry.siemens.com/cs/ww/en/view/109748024 - BehobenSIMATIC WinCC flexible 2008
Upgrade to WinCC flexible 2008 SP5 - Download: https://support.industry.siemens.com/cs/ww/en/view/109749111
https://support.industry.siemens.com/cs/ww/en/view/109749111 - BehobenSINAUT ST7CC
15 Update SIMATIC WinCC to V7.3 Update 15 or newer - Download: https://support.industry.siemens.com/cs/ww/en/view/109750182
https://support.industry.siemens.com/cs/ww/en/view/109750182 - BehobenSINEMA Server
Upgrade to V14 - Download: https://support.industry.siemens.com/cs/ww/en/view/109748854
https://support.industry.siemens.com/cs/ww/en/view/109748854 - BehobenSMART PC Access
Update to V2.3 - Download: SMART PC Access V2.3 can be obtained by contacting your local Siemens representative or customer support: https://w3.siemens.com/aspa_app/
https://w3.siemens.com/aspa - BehobenSTEP 7 - Micro/WIN SMART
Update to V2.3 - Download: Micro/WIN SMART V2.3 can be obtained by contacting your local Siemens representative or customer support: https://w3.siemens.com/aspa_app/
https://w3.siemens.com/aspa - BehobenSecurity Configuration Tool (SCT)
Update to V5.0 - Download: https://support.industry.siemens.com/cs/de/en/view/109747539
https://support.industry.siemens.com/cs/de/en/view/109747539
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan