Siemens SIMATIC and SIPLUS Products
Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver to perform a denial of service attack. Siemens has released a new version for SINAMICS S120 (incl. SIPLUS variants) and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-47375US | — | — | ||
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMA… | ||||
| CVE-2022-47374US | — | — | ||
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMA… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-892915: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - CSAF Versionself
- SSA-892915: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - HTML Versionself
- SSA-892915: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - PDF Versionself
- SSA-892915: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - TXT Versionself
- ICS Advisory ICSA-23-348-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-348-05 - Web Versionself
- Recommended Practicesexternal
Behebungen (36)
- Kein Fix geplant SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0)
Currently no fix is planned
- Kein Fix geplant SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0)
Currently no fix is planned
- Kein Fix geplant SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0)
Currently no fix is planned
- Kein Fix geplant SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0)
Currently no fix is planned
- Kein Fix geplant SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0)
Currently no fix is planned
- Kein Fix geplant SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0)
Currently no fix is planned
- Kein Fix geplant SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0)
Currently no fix is planned
- Kein Fix geplant SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0)
Currently no fix is planned
- Kein Fix geplantSIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0)
Currently no fix is planned
- Kein Fix geplantSIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0)
Currently no fix is planned
- Kein Fix geplantSIMATIC PC-Station Plus
Currently no fix is planned
- Kein Fix geplantSIMATIC PC-Station Plus
Currently no fix is planned
- Kein Fix geplantSIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0)
Currently no fix is planned
- Kein Fix geplantSIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0)
Currently no fix is planned
- Kein Fix geplantSIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)
Currently no fix is planned
- Kein Fix geplantSIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)
Currently no fix is planned
- BehobenSINAMICS S120 (incl. SIPLUS variants)
Update to V5.2 SP3 HF15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780844/ - BehobenSINAMICS S120 (incl. SIPLUS variants)
Update to V5.2 SP3 HF15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780844/ - Workaround SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0)
Disable the web server of the affected system
- Workaround SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0)
Disable the web server of the affected system
- Workaround SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0)
Disable the web server of the affected system
- Workaround SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0)
Disable the web server of the affected system
- Workaround SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0)
Disable the web server of the affected system
- Workaround SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0)
Disable the web server of the affected system
- Workaround SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0)
Disable the web server of the affected system
- Workaround SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0)
Disable the web server of the affected system
- WorkaroundSIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0)
Disable the web server of the affected system
- WorkaroundSIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0)
Disable the web server of the affected system
- WorkaroundSIMATIC PC-Station Plus
Disable the web server of the affected system
- WorkaroundSIMATIC PC-Station Plus
Disable the web server of the affected system
- WorkaroundSINAMICS S120 (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSINAMICS S120 (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0)
Disable the web server of the affected system
- WorkaroundSIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0)
Disable the web server of the affected system
- WorkaroundSIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)
Disable the web server of the affected system
- WorkaroundSIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0)
Disable the web server of the affected system
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan