Siemens SIMATIC CP (Update A)
Advisory ansehen veröffentlicht 2021-09-14
A cleartext vulnerability was found in the SIMATIC communication processors CP 1543-1 and CP 1545-1 that could allow an attacker to read sensitive information. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-33716US | medium6.5OT erhöht | — | ||
A vulnerability has been identified in SIMATIC CP 1543-1 (incl. SIPLUS variants) (All versions < V3.0), SIMATIC CP 1545-1 (All versions < V1.1). An attacker with access to the subn… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-535997: Cleartext Storage of Sensitive Information in Multiple SIMATIC Products - CSAF Versionself
- SSA-535997: Cleartext Storage of Sensitive Information in Multiple SIMATIC Products - PDF Versionself
- SSA-535997: Cleartext Storage of Sensitive Information in Multiple SIMATIC Products - TXT Versionself
- ICS Advisory ICSA-21-257-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-257-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenSIMATIC CP 1543-1 (incl. SIPLUS variants)
After migrating the project successfully, compilation and download to the device is required.
https://support.industry.siemens.com/cs/ww/en/view/109800773/ - BehobenSIMATIC CP 1545-1
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan