ICSA-19-318-02

Siemens S7-1200 and S7-200 SMART CPUs (Update B)

Advisory ansehen veröffentlicht 2019-11-12

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2019-13945US	medium6.8	0.53% (45th)	—	2019-12-12
A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-1200 CPU family < V4.x (incl. SIPLUS variants) (All versions),…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

SSA-686531: Hardware based manufacturing access on S7-1200 and S7-200 SMART - HTML Versionself
ICS Advisory ICSA-19-318-02 JSONself
Recommended Practicesexternal
ICS Advisory ICSA-19-318-02 - Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

Behebungen (32)

MitigationSIMATIC S7-1200 CPU family < V4.x (incl.'SIPLUS variants)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC S7-1200 CPU family V4.x (incl.'SIPLUS variants)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC S7-200 SMART CPU CR20s (6ES7 288-1CR20-0AA1)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC S7-200 SMART CPU CR30s (6ES7 288-1CR30-0AA1)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC S7-200 SMART CPU CR40 (6ES7 288-1CR40-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC S7-200 SMART CPU CR40s (6ES7 288-1CR40-0AA1)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC S7-200 SMART CPU CR60 (6ES7 288-1CR60-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC S7-200 SMART CPU CR60s (6ES7 288-1CR60-0AA1)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC S7-200 SMART CPU SR20 (6ES7 288-1SR20-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC S7-200 SMART CPU SR30 (6ES7 288-1SR30-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC S7-200 SMART CPU SR40 (6ES7 288-1SR40-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC S7-200 SMART CPU SR60 (6ES7 288-1SR60-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC S7-200 SMART CPU ST20 (6ES7 288-1ST20-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC S7-200 SMART CPU ST30 (6ES7 288-1ST30-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC S7-200 SMART CPU ST40 (6ES7 288-1ST40-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC S7-200 SMART CPU ST60 (6ES7 288-1ST60-0AA0)
Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security
Kein Fix verfügbarSIMATIC S7-1200 CPU family < V4.x (incl.'SIPLUS variants)
Firmware versions less than V4.x cannot be updated.
BehobenSIMATIC S7-1200 CPU family V4.x (incl.'SIPLUS variants)
Update to version >= V4.4.1 and Function State (FS) >= 11
BehobenSIMATIC S7-200 SMART CPU CR20s (6ES7 288-1CR20-0AA1)
Update to version >= V2.3.0 and the latest boot loader version
BehobenSIMATIC S7-200 SMART CPU CR30s (6ES7 288-1CR30-0AA1)
Update to version >= V2.3.0 and the latest boot loader version
BehobenSIMATIC S7-200 SMART CPU CR40 (6ES7 288-1CR40-0AA0)
Update to version >= V2.2.3 and the latest boot loader version
BehobenSIMATIC S7-200 SMART CPU CR40s (6ES7 288-1CR40-0AA1)
Update to version >= V2.3.0 and the latest boot loader version
BehobenSIMATIC S7-200 SMART CPU CR60 (6ES7 288-1CR60-0AA0)
Update to version >= V2.2.3 and the latest boot loader version
BehobenSIMATIC S7-200 SMART CPU CR60s (6ES7 288-1CR60-0AA1)
Update to version >= V2.3.0 and the latest boot loader version
BehobenSIMATIC S7-200 SMART CPU SR20 (6ES7 288-1SR20-0AA0)
Update to version >= V2.5.1 and the latest boot loader version
BehobenSIMATIC S7-200 SMART CPU SR30 (6ES7 288-1SR30-0AA0)
Update to version >= V2.5.1 and the latest boot loader version
BehobenSIMATIC S7-200 SMART CPU SR40 (6ES7 288-1SR40-0AA0)
Update to version >= V2.5.1 and the latest boot loader version
BehobenSIMATIC S7-200 SMART CPU SR60 (6ES7 288-1SR60-0AA0)
Update to version >= V2.5.1 and the latest boot loader version
BehobenSIMATIC S7-200 SMART CPU ST20 (6ES7 288-1ST20-0AA0)
Update to version >= V2.5.1 and the latest boot loader version
BehobenSIMATIC S7-200 SMART CPU ST30 (6ES7 288-1ST30-0AA0)
Update to version >= V2.5.1 and the latest boot loader version
BehobenSIMATIC S7-200 SMART CPU ST40 (6ES7 288-1ST40-0AA0)
Update to version >= V2.5.1 and the latest boot loader version
BehobenSIMATIC S7-200 SMART CPU ST60 (6ES7 288-1ST60-0AA0)
Update to version >= V2.5.1 and the latest boot loader version

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan