Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update D)
Several industrial controllers are affected by a security vulnerability that could allow an attacker to cause a denial of service condition via PROFINET DCP network packets under certain circumstances. Precondition for this scenario is a direct OSI Layer 2 access to the affected products. PROFIBUS interfaces are not affected. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-4843US | medium6.1 | — | ||
A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-592007: Denial of Service Vulnerability in Industrial Products - CSAF Versionself
- SSA-592007: Denial of Service Vulnerability in Industrial Products - HTML Versionself
- SSA-592007: Denial of Service Vulnerability in Industrial Products - PDF Versionself
- SSA-592007: Denial of Service Vulnerability in Industrial Products - TXT Versionself
- ICS Advisory ICSA-18-079-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-18-079-02 - Web Versionself
- Recommended Practicesexternal
Behebungen (90)
- Mitigation SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0)
Use VPN for protecting network communication between cells.
- Mitigation SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0)
Use VPN for protecting network communication between cells.
- Mitigation SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0)
Use VPN for protecting network communication between cells.
- Mitigation SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC CP 343-1 (incl. SIPLUS variants)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-1500 Software Controller
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC S7-410 CPU family (incl. SIPLUS variants)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0)
Use VPN for protecting network communication between cells.
- MitigationSIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0)
Use VPN for protecting network communication between cells.
- MitigationSINUMERIK 828D
Use VPN for protecting network communication between cells.
- MitigationSIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0)
Use VPN for protecting network communication between cells.
- MitigationSIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)
Use VPN for protecting network communication between cells.
- MitigationSoftnet PROFINET IO for PC-based Windows systems
Use VPN for protecting network communication between cells.
- Kein Fix geplantSIMATIC CP 343-1 (incl. SIPLUS variants)
Currently no fix is planned
- Kein Fix geplantSIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Currently no fix is planned
- Kein Fix geplantSoftnet PROFINET IO for PC-based Windows systems
Currently no fix is planned
- Behoben SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - Behoben SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - Behoben SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - Behoben SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - BehobenSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - BehobenSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - BehobenSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - BehobenSIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/47353723/ - BehobenSIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/47354354/ - BehobenSIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/47354502/ - BehobenSIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/47354578/ - BehobenSIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/62612377/ - BehobenSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Update to V1.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/ - BehobenSIMATIC S7-1500 Software Controller
Update to V1.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478528/ - BehobenSIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0)
Update to V3.3.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/51466769/ - BehobenSIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/40360647/ - BehobenSIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/40944925/ - BehobenSIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/85049260/ - BehobenSIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/40362228/ - BehobenSIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/40945128/ - BehobenSIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/85059804/ - BehobenSIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/85063017/ - BehobenSIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/44442927/ - BehobenSIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/44443101/ - BehobenSIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - BehobenSIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)
Update to V6.0.9
https://support.industry.siemens.com/cs/ww/en/view/109474550 - BehobenSIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants)
Update to V6.0.7
https://support.industry.siemens.com/cs/ww/en/view/109474874 - BehobenSIMATIC S7-410 CPU family (incl. SIPLUS variants)
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109476571 - BehobenSIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0)
Update to V2010 SP3 or later version and apply BIOS and Microsoft Windows updates
https://support.industry.siemens.com/cs/ww/en/view/109765109/ - BehobenSIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0)
Update to V2010 SP3 or later version and apply BIOS and Microsoft Windows updates
https://support.industry.siemens.com/cs/ww/en/view/109765109/ - BehobenSINUMERIK 828D
Update to V4.7 SP6 HF1 or later version SINUMERIK software can be obtained from your local Siemens account manager
- BehobenSIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/47353723/ - BehobenSIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/47354354/ - BehobenSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - BehobenSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/ - BehobenSIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0)
Update to V3.3.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/51466769/ - BehobenSIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/40360647/ - BehobenSIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/40944925/ - BehobenSIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/40362228/ - BehobenSIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0)
Update to V3.2.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/40945128/ - BehobenSIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/ - BehobenSIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)
Update to V7.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109752685/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan