ICSA-20-042-05

icsaUScisa_csaf_ot

Siemens SIMATIC S7 (Update B)

Advisory ansehen veröffentlicht 2020-02-11

SIMATIC S7 CPU families are affected by a vulnerability that could allow remote attackers to perform a denial of service attack by sending a specially crafted HTTP request to the web server of an affected device. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-13940UShigh7.5—
A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pr…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (54)

  • MitigationSIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-1200 CPU family (incl. SIPLUS variants)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0)

    Disable the web server. Note that this feature is disabled by default

  • MitigationSIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0)

    Disable the web server. Note that this feature is disabled by default

  • Kein Fix geplantSIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0)

    Currently no fix is planned

  • BehobenSIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/47353723/
  • BehobenSIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/47354354/
  • BehobenSIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/47354502/
  • BehobenSIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/47354578/
  • BehobenSIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/62612377/
  • BehobenSIMATIC S7-1200 CPU family (incl. SIPLUS variants)

    Update to V4.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/106200276/
  • BehobenSIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/51466769/
  • BehobenSIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/40360647/
  • BehobenSIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/40944925/
  • BehobenSIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/85049260/
  • BehobenSIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/40362228/
  • BehobenSIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/40945128/
  • BehobenSIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/85059804/
  • BehobenSIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/85063017/
  • BehobenSIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/44442927/
  • BehobenSIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/44443101/
  • BehobenSIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/47353723/
  • BehobenSIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/47354354/
  • BehobenSIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/51466769/
  • BehobenSIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/40360647/
  • BehobenSIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/40944925/
  • BehobenSIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/40362228/
  • BehobenSIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0)

    Update to V3.X.17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/40945128/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan