ICSA-24-102-02

icsaUScisa_csaf_ot

Siemens SIMATIC WinCC

Advisory ansehen veröffentlicht 2024-04-09

A vulnerability in the login dialog box of SIMATIC WinCC could allow a local attacker to cause a denial of service condition in the runtime of the SCADA system. Siemens has released new versions for the affected products and recommends to update to the latest versions.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2023-50821US——
A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC04), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Update 8), SIMATIC WinCC Runtim…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (12)

  • MitigationSIMATIC PCS 7 V9.1

    Activate SIMATIC Logon in the User Administrator of the SIMATIC PCS 7 Operator Stations

  • MitigationSIMATIC WinCC Runtime Professional V17

    Activate SIMATIC Logon in the User Administrator of the SIMATIC PCS 7 Operator Stations

  • MitigationSIMATIC WinCC Runtime Professional V18

    Activate SIMATIC Logon in the User Administrator of the SIMATIC PCS 7 Operator Stations

  • MitigationSIMATIC WinCC Runtime Professional V19

    Activate SIMATIC Logon in the User Administrator of the SIMATIC PCS 7 Operator Stations

  • MitigationSIMATIC WinCC V7.5

    Activate SIMATIC Logon in the User Administrator of the SIMATIC PCS 7 Operator Stations

  • MitigationSIMATIC WinCC V8.0

    Activate SIMATIC Logon in the User Administrator of the SIMATIC PCS 7 Operator Stations

  • BehobenSIMATIC PCS 7 V9.1

    Update to V9.1 SP2 UC04 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109812242/
  • BehobenSIMATIC WinCC Runtime Professional V17

    Update to V17 Update 8 or later version

  • BehobenSIMATIC WinCC Runtime Professional V18

    Update to V18 Update 4 or later version

  • BehobenSIMATIC WinCC Runtime Professional V19

    Update to V19 Update 1 or later version

  • BehobenSIMATIC WinCC V7.5

    Update to V7.5 SP2 Update 16 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109793460/
  • BehobenSIMATIC WinCC V8.0

    Update to V8.0 Update 5 or later version

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan