ICSA-21-194-13

Siemens SINAMICS PERFECT HARMONY GH180 (Update A)

Advisory ansehen veröffentlicht 2021-07-13

Successful exploitation of this vulnerability could result in arbitrary code execution and unauthorized access to sensitive data.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2020-15782US	critical9.8	5.18% (92nd)	—	2021-05-28
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

ICS Advisory ICSA-21-194-13 JSONself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
ICS Advisory ICSA-21-194-13 Web Versionself

Behebungen (3)

BehobenSINAMICS PERFECT HARMONY GH180 Drives
Siemens has identified the following specific mitigations and workarounds users can apply to reduce the risk:
BehobenSINAMICS PERFECT HARMONY model 6SR4
Siemens has identified the following specific mitigations and workarounds users can apply to reduce the risk:
BehobenSINAMICS PERFECT HARMONY model 6SR5
Siemens has identified the following specific mitigations and workarounds users can apply to reduce the risk:

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan