Siemens SIMATIC CP
Advisory ansehen veröffentlicht 2024-11-12
SIMATIC CP 1543-1 devices contain an Incorrect Authorization vulnerability that could allow an unauthenticated attacker to gain access to the filesystem. Siemens has released a new version for SIMATIC CP 1543-1 V4.0 and recommends to update to the latest version.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-50310US | —OT erhöht | — | ||
A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 (6GK7543-1AX10-0XE0) (All versions >= V4.0.44 < V4.0.50). Affected devices do not properly handle authorization. This… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-654798: Incorrect Authorization Vulnerability in SIMATIC CP 1543-1 Devices - CSAF Versionself
- SSA-654798: Incorrect Authorization Vulnerability in SIMATIC CP 1543-1 Devices - HTML Versionself
- ICS Advisory ICSA-24-319-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-319-11 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationSIMATIC CP 1543-1 V4.0 (6GK7543-1AX10-0XE0)
Restrict access to port 8448/tcp to trusted systems only
- BehobenSIMATIC CP 1543-1 V4.0 (6GK7543-1AX10-0XE0)
Update to V4.0.50 or later version
https://support.industry.siemens.com/cs/ww/en/view/109976120/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan