ICSA-19-227-04

icsaUScisa_csaf_ot

Siemens SINAMICS (Update C)

Advisory ansehen veröffentlicht 2019-08-13

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-6568USmedium5.0—
The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (21)

  • MitigationSINAMICS GH150 V4.7 (Control Unit)

    Apply appropriate strategies for mitigation as described in the General Security Recommendation section.

  • MitigationSINAMICS GH150 V4.8 (Control Unit)

    Apply appropriate strategies for mitigation as described in the General Security Recommendation section.

  • MitigationSINAMICS GL150 V4.7 (Control Unit)

    Apply appropriate strategies for mitigation as described in the General Security Recommendation section.

  • MitigationSINAMICS GL150 V4.8 (Control Unit)

    Apply appropriate strategies for mitigation as described in the General Security Recommendation section.

  • MitigationSINAMICS GM150 V4.7 (Control Unit)

    Apply appropriate strategies for mitigation as described in the General Security Recommendation section.

  • MitigationSINAMICS GM150 V4.8 (Control Unit)

    Apply appropriate strategies for mitigation as described in the General Security Recommendation section.

  • MitigationSINAMICS SL150 V4.7 (Control Unit)

    Apply appropriate strategies for mitigation as described in the General Security Recommendation section.

  • MitigationSINAMICS SL150 V4.8 (Control Unit)

    Apply appropriate strategies for mitigation as described in the General Security Recommendation section.

  • MitigationSINAMICS SM120 V4.7 (Control Unit)

    Apply appropriate strategies for mitigation as described in the General Security Recommendation section.

  • MitigationSINAMICS SM120 V4.8 (Control Unit)

    Apply appropriate strategies for mitigation as described in the General Security Recommendation section.

  • MitigationSINAMICS SM150 V4.8 (Control Unit)

    Apply appropriate strategies for mitigation as described in the General Security Recommendation section.

  • BehobenSINAMICS GH150 V4.7 (Control Unit)

    Upgrade to V4.8 SP2 HF9 or later version. The software can be obtained from your Siemens representative or via Siemens customer service.

  • BehobenSINAMICS GH150 V4.8 (Control Unit)

    Upgrade to V4.8 SP2 HF9 or later version. The software can be obtained from your Siemens representative or via Siemens customer service.

  • BehobenSINAMICS GL150 V4.7 (Control Unit)

    Upgrade to V4.8 SP2 HF9 or later version. The software can be obtained from your Siemens representative or via Siemens customer service.

  • BehobenSINAMICS GL150 V4.8 (Control Unit)

    Upgrade to V4.8 SP2 HF9 or later version. The software can be obtained from your Siemens representative or via Siemens customer service.

  • BehobenSINAMICS GM150 V4.8 (Control Unit)

    Upgrade to V4.8 SP2 HF9 or later version. The software can be obtained from your Siemens representative or via Siemens customer service.

  • BehobenSINAMICS SL150 V4.7 (Control Unit)

    Update to V4.7 HF33 or upgrade to V5.2 SP2. The software can be obtained from your Siemens representative or via Siemens customer service.

  • BehobenSINAMICS SL150 V4.8 (Control Unit)

    Upgrade to V5.2 SP2. The software can be obtained from your Siemens representative or via Siemens customer service

  • BehobenSINAMICS SM120 V4.7 (Control Unit)

    Upgrade to V4.8 SP2 HF10 or later version. The software can be obtained from your Siemens representative or via Siemens customer service.

  • BehobenSINAMICS SM120 V4.8 (Control Unit)

    Upgrade to V4.8 SP2 HF10 or later version. The software can be obtained from your Siemens representative or via Siemens customer service.

  • BehobenSINAMICS SM150 V4.8 (Control Unit)

    Upgrade to V5.1 SP2 HF3 or later version. The software can be obtained from your Siemens representative or via Siemens customer service.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan