Siemens Medium Voltage SINAMICS Products (Update A)
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-12741US | high7.5 | — | ||
Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually. | ||||
| CVE-2017-2680US | medium6.5 | — | ||
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-546832: Vulnerabilities in Medium Voltage SINAMICS and SIMOTION Products - HTML Versionself
- ICS Advisory ICSA-18-128-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-18-128-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (32)
- MitigationSIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants)
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants)
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS GH150 V4.7 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS GH150 V4.7 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS GL150 V4.7 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS GL150 V4.7 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS GM150 V4.7 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS GM150 V4.7 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS SL150 V4.7.0 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS SL150 V4.7.0 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS SL150 V4.7.4 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS SL150 V4.7.4 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS SL150 V4.7.5 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS SL150 V4.7.5 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS SM120 V4.7 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- MitigationSINAMICS SM120 V4.7 w. PROFINET
Apply cell protection concept and implement Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security.
- BehobenSIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants)
Update to V4.4 HF26 The update can be obtained from your Siemens representative or via Siemens customer service.
- BehobenSIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants)
Update to V4.4 HF26. The update can be obtained from your Siemens representative or via Siemens customer service.
- BehobenSINAMICS GH150 V4.7 w. PROFINET
Update to V4.7 SP5 HF7 or upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- BehobenSINAMICS GH150 V4.7 w. PROFINET
Update to V4.7 SP5 HF7 or upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- BehobenSINAMICS GL150 V4.7 w. PROFINET
Upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- BehobenSINAMICS GL150 V4.7 w. PROFINET
Upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- BehobenSINAMICS GM150 V4.7 w. PROFINET
Update to V4.7 HF31 or update to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- BehobenSINAMICS GM150 V4.7 w. PROFINET
Update to V4.7 HF31 or update to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- BehobenSINAMICS SL150 V4.7.0 w. PROFINET
Update to V4.7 HF30 or upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- BehobenSINAMICS SL150 V4.7.0 w. PROFINET
Update to V4.7 HF30 or upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- BehobenSINAMICS SL150 V4.7.4 w. PROFINET
Upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- BehobenSINAMICS SL150 V4.7.4 w. PROFINET
Upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- BehobenSINAMICS SL150 V4.7.5 w. PROFINET
Upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- BehobenSINAMICS SL150 V4.7.5 w. PROFINET
Upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- BehobenSINAMICS SM120 V4.7 w. PROFINET
Upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
- BehobenSINAMICS SM120 V4.7 w. PROFINET
Upgrade to V4.8 SP2. The update can be obtained from your Siemens representative or via Siemens customer service.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan