Siemens SIMATIC Software Products (Update B)
Multiple SIMATIC software products are affected by a vulnerability that could allow an attacker to change the content of certain metafiles and subsequently manipulate parameters or behaviour of devices configured by the affected software products. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-31894US | high8.8 | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions < V9.1 SP2), SIMATIC PDM (All versions < V9.2 SP2), SIMATIC S… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-661034: Incorrect Permission Assignment in Multiple SIMATIC Software Products - CSAF Versionself
- SSA-661034: Incorrect Permission Assignment in Multiple SIMATIC Software Products - PDF Versionself
- SSA-661034: Incorrect Permission Assignment in Multiple SIMATIC Software Products - TXT Versionself
- ICS Advisory ICSA-21-194-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-194-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (10)
- MitigationSIMATIC PCS 7 V8.2 and earlier
Restrict access on the engineering station to trusted users only
- MitigationSIMATIC PCS 7 V9.X
Restrict access on the engineering station to trusted users only
- MitigationSIMATIC PDM
Restrict access on the engineering station to trusted users only
- MitigationSIMATIC STEP 7 V5.X
Restrict access on the engineering station to trusted users only
- MitigationSINAMICS STARTER (containing STEP 7 OEM version)
Restrict access on the engineering station to trusted users only
- Kein Fix geplantSIMATIC PCS 7 V8.2 and earlier
Currently no fix is planned
- BehobenSIMATIC PCS 7 V9.X
Update to V9.1 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812240/ - BehobenSIMATIC PDM
Update to V9.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811911/ - BehobenSIMATIC STEP 7 V5.X
Update to V5.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794088/ - BehobenSINAMICS STARTER (containing STEP 7 OEM version)
Update to V5.4 SP2 HF1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800526/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan