ICSA-19-344-06

icsaUScisa_csaf_ot

Siemens SIMATIC S7-1200 and S7-1500 CPU Families (Update B)

Advisory ansehen veröffentlicht 2019-12-10

Successful exploitation of these vulnerabilities may allow an attacker to modify network traffic or impact the perceived integrity of the user program stored on the CPU.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-10943UShigh7.5OT erhöht—
A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATI…
CVE-2019-10929USmedium5.9OT erhöht—
A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (30)

  • MitigationSIMATIC Drive Controller family

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC Drive Controller family

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC S7-1200 CPU family (incl. SIPLUS variants)

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC S7-1200 CPU family (incl. SIPLUS variants)

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC S7-1500 Software Controller

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC S7-1500 Software Controller

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC S7-PLCSIM Advanced

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • MitigationSIMATIC S7-PLCSIM Advanced

    All affected devices contain a feature called “Access Protection” that prohibits unauthorized modifications of user code. Siemens recommends using access protection to protect affected devices from unauthorized modifications.

  • BehobenSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)

    SIMATIC ET 200SP Open Controller CPU 1515SP PC2: Update to v20.8

    https://support.industry.siemens.com/cs/document/109759122/
  • BehobenSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)

    SIMATIC ET 200SP Open Controller CPU 1515SP PC2: Update to v20.8

    https://support.industry.siemens.com/cs/document/109759122/
  • BehobenSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)

    SIMATIC ET 200SP Open Controller CPU 1515SP PC2: Update to v20.8

    https://support.industry.siemens.com/cs/document/109759122/
  • BehobenSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)

    SIMATIC ET 200SP Open Controller CPU 1515SP PC2: Update to v20.8

    https://support.industry.siemens.com/cs/document/109759122/
  • BehobenSIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC

    SIMATIC ET 200SP Open Controller CPU 1515SP PC2: Update to v20.8

    https://support.industry.siemens.com/cs/document/109759122/
  • BehobenSIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC

    SIMATIC ET 200SP Open Controller CPU 1515SP PC2: Update to v20.8

    https://support.industry.siemens.com/cs/document/109759122/
  • BehobenSIMATIC S7-1200 CPU family (incl. SIPLUS variants)

    SIMATIC S7-1200 CPU family: Update to v4.4.0

    https://support.industry.siemens.com/cs/ww/en/view/109793280/
  • BehobenSIMATIC S7-1200 CPU family (incl. SIPLUS variants)

    SIMATIC S7-1200 CPU family: Update to v4.4.0

    https://support.industry.siemens.com/cs/ww/en/view/109793280/
  • BehobenSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

    SIMATIC S7-1500 CPU family: Update to v2.8.1

    https://support.industry.siemens.com/cs/document/109478459/
  • BehobenSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

    SIMATIC S7-1500 CPU family: Update to v2.8.1

    https://support.industry.siemens.com/cs/document/109478459/
  • BehobenSIMATIC S7-1500 Software Controller

    SIMATIC S7-1500 Software Controller: Update to v20.8

    https://support.industry.siemens.com/cs/document/109772864/
  • BehobenSIMATIC S7-1500 Software Controller

    SIMATIC S7-1500 Software Controller: Update to v20.8

    https://support.industry.siemens.com/cs/document/109772864/
  • BehobenSIMATIC S7-PLCSIM Advanced

    SIMATIC S7 PLCSIM Advanced: Update to v3.0

    https://support.industry.siemens.com/cs/document/109772889/
  • BehobenSIMATIC S7-PLCSIM Advanced

    SIMATIC S7 PLCSIM Advanced: Update to v3.0

    https://support.industry.siemens.com/cs/document/109772889/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan