Siemens SIMATIC STEP 7 (TIA Portal)
Advisory ansehen veröffentlicht 2023-12-12
Siemens has released a new version of STEP 7 (TIA Portal) that fixes an information disclosure vulnerability. A local attacker could gain access to the access level password of the SIMATIC S7-1200 and S7-1500 CPUs, when entered by a legitimate user in the hardware configuration of the affected application.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-46141US | medium5.5OT erhöht | — | ||
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An information disclosure vulnerability could allow a local attacker to gain access to the… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-887801: Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal) - CSAF Versionself
- SSA-887801: Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal) - HTML Versionself
- SSA-887801: Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal) - PDF Versionself
- SSA-887801: Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal) - TXT Versionself
- ICS Advisory ICSA-23-348-07 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-348-07 - Web Versionself
- Recommended Practicesexternal
03
Behebungen (1)
- BehobenSIMATIC STEP 7 (TIA Portal)
Update to V19 or later version
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan