ICSA-22-314-04

icsaUScisa_csaf_ot

Siemens SINUMERIK ONE and SINUMERIK MC

Advisory ansehen veröffentlicht 2022-11-08

SINUMERIK ONE and SINUMERIK MC products are affected by a weak key protection vulnerability in the integrated S7-1500 CPU. The weak key protection vulnerability in the integrated S7-1500 CPU is documented in more detail in SSA-568427 [1]. Siemens has released updates for the affected products and recommends to update to the latest versions. [1] https://cert-portal.siemens.com/productcert/html/ssa-568427.html

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-38465UShigh7.8—
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

  • MitigationSINUMERIK MC

    Expose the communication between the S7-1500 CPU and the HMI of the affected products only to trusted network environments

  • MitigationSINUMERIK ONE

    Expose the communication between the S7-1500 CPU and the HMI of the affected products only to trusted network environments

  • BehobenSINUMERIK MC

    Update to V6.21 or later version SINUMERIK software can be obtained from your local Siemens account manager.

  • BehobenSINUMERIK ONE

    Update to V6.21 or later version SINUMERIK software can be obtained from your local Siemens account manager.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan