ICSA-22-104-16

Siemens TIA Administrator

Advisory ansehen veröffentlicht 2022-04-12

In conjunction with the installation of the affected products listed in the table below, a vulnerability in TIA Administrator occurs that could allow an unauthenticated attacker to perform a denial of service attack. Siemens has released updates for the affected products and recommends to update to the latest versions.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2022-27194US	high7.5	1.43% (73rd)	—	2022-04-12
A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affec…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Behebungen (6)

MitigationSIMATIC PCS neo (Administration Console)
Apply measures described in "Industrial Security in SIMATIC PCS neo": https://support.industry.siemens.com/cs/ww/en/view/109771524/
MitigationSINETPLAN
Restrict access to port 8888/tcp to localhost (default)
MitigationTIA Portal
Restrict access to port 8888/tcp to localhost (default)
BehobenSIMATIC PCS neo (Administration Console)
Update to V3.1 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807752/
BehobenSINETPLAN
Update TIA Administrator to V1.0 SP7 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/
BehobenTIA Portal
Update TIA Administrator to V1.0 SP7 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan