FESTO Didactic CP, MPS 200, and MPS 400 Firmware
Siemens SIMATIC S7-1200 and S7-1500 CPUs contained in various Festo Didactic products contain a memory protection bypass vulnerability that could allow an attacker to write arbitrary data and code to protected memory areas or read sensitive data to launch further attacks
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-15782US | critical9.8 | — | ||
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- VDE-2024-055: Festo: Siemens S7-1500/ET200SP CPU used in Festo Didactic products contains a memory protection bypass vulnerabilityself
- CERT@VDE Security Advisories for Festoexternal
- For further security-related issues in Festo products please contact the Festo Product Security Incident Response Team (PSIRT)external
- ICS Advisory ICSA-25-182-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-182-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (3)
- BehobenSiemens Simatic S7-1500 / ET200SP < V2.9.2 installed on FESTO Didactic CP including S7 PLC
Update Siemens Simatic S7-1500 / ET200SP Firmware to V2.9.2 or higher
https://support.industry.siemens.com/cs/de/en/view/109478459 - BehobenSiemens Simatic S7-1500 / ET200SP < V2.9.2 installed on FESTO Didactic MPS 200 Systems
Update Siemens Simatic S7-1500 / ET200SP Firmware to V2.9.2 or higher
https://support.industry.siemens.com/cs/de/en/view/109478459 - BehobenSiemens Simatic S7-1500 / ET200SP < V2.9.2 installed on FESTO Didactic MPS 400 Systems
Update Siemens Simatic S7-1500 / ET200SP Firmware to V2.9.2 or higher
https://support.industry.siemens.com/cs/de/en/view/109478459
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan