Siemens SIMATIC WinCC and PCS
Multiple vulnerabilities were found in SIMATIC WinCC that ultimately could allow attackers to retrieve and brute force password hashes and access other systems. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-40363US | high7.8OT erhöht | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and ear… | ||||
| CVE-2021-40360US | high8.8 | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and ear… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-914168: Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products - CSAF Versionself
- SSA-914168: Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products - PDF Versionself
- SSA-914168: Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products - TXT Versionself
- ICS Advisory ICSA-22-041-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-041-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (26)
- MitigationSIMATIC PCS 7 V8.2
CVE-2021-40363: Harden the application's host to prevent local access by untrusted personnel
- MitigationSIMATIC PCS 7 V9.0
CVE-2021-40363: Harden the application's host to prevent local access by untrusted personnel
- MitigationSIMATIC PCS 7 V9.1
CVE-2021-40363: Harden the application's host to prevent local access by untrusted personnel
- MitigationSIMATIC WinCC V15 and earlier
CVE-2021-40363: Harden the application's host to prevent local access by untrusted personnel
- MitigationSIMATIC WinCC V16
CVE-2021-40363: Harden the application's host to prevent local access by untrusted personnel
- MitigationSIMATIC WinCC V17
CVE-2021-40363: Harden the application's host to prevent local access by untrusted personnel
- MitigationSIMATIC WinCC V7.4
CVE-2021-40363: Harden the application's host to prevent local access by untrusted personnel
- MitigationSIMATIC WinCC V7.5
CVE-2021-40363: Harden the application's host to prevent local access by untrusted personnel
- Kein Fix geplantSIMATIC PCS 7 V8.2
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS 7 V8.2
Currently no fix is planned
- BehobenSIMATIC PCS 7 V8.2
Install SIMATIC WinCC V7.4 SP1 Update 19 or later version
https://support.industry.siemens.com/cs/ww/en/view/109806846/ - BehobenSIMATIC PCS 7 V8.2
Install SIMATIC WinCC V7.4 SP1 Update 19 or later version
https://support.industry.siemens.com/cs/ww/en/view/109806846/ - BehobenSIMATIC PCS 7 V9.0
Update to V9.0 SP3 UpdateCollection04 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780528/ - BehobenSIMATIC PCS 7 V9.0
Update to V9.0 SP3 UpdateCollection04 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780528/ - BehobenSIMATIC PCS 7 V9.1
Update to V9.1 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805073/ - BehobenSIMATIC PCS 7 V9.1
Update to V9.1 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805073/ - BehobenSIMATIC WinCC V15 and earlier
Update to V15 SP1 Update 7 or later version
https://support.industry.siemens.com/cs/us/en/view/109763890/ - BehobenSIMATIC WinCC V15 and earlier
Update to V15 SP1 Update 7 or later version
https://support.industry.siemens.com/cs/us/en/view/109763890/ - BehobenSIMATIC WinCC V16
Update to V16 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776017/ - BehobenSIMATIC WinCC V16
Update to V16 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776017/ - BehobenSIMATIC WinCC V17
Update to V17 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/ - BehobenSIMATIC WinCC V17
Update to V17 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/ - BehobenSIMATIC WinCC V7.4
Update to V7.4 SP1 Update 19 or later version
https://support.industry.siemens.com/cs/ww/en/view/109806846/ - BehobenSIMATIC WinCC V7.4
Update to V7.4 SP1 Update 19 or later version
https://support.industry.siemens.com/cs/ww/en/view/109806846/ - BehobenSIMATIC WinCC V7.5
Update to V7.5 SP2 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793460/ - BehobenSIMATIC WinCC V7.5
Update to V7.5 SP2 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793460/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan