Siemens SIMATIC, SIPLUS, and TIM
Multiple NULL pointer dereference vulnerabilities in the affected products could allow an attacker with network access to the webserver, to perform a denial of service attack. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-30756US | — | — | ||
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.5.20), SI… | ||||
| CVE-2023-30755US | — | — | ||
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.5.20), SI… | ||||
| CVE-2023-28827US | — | — | ||
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.5.20), SI… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products - CSAF Versionself
- SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products - HTML Versionself
- ICS Advisory ICSA-24-256-09 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-256-09 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (72)
- Kein Fix geplantSIMATIC HMI Comfort Panels (incl. SIPLUS variants)
Currently no fix is planned
- Kein Fix geplantSIMATIC HMI Comfort Panels (incl. SIPLUS variants)
Currently no fix is planned
- Kein Fix geplantSIMATIC HMI Comfort Panels (incl. SIPLUS variants)
Currently no fix is planned
- Kein Fix geplantSIMATIC IPC DiagBase
Currently no fix is planned
- Kein Fix geplantSIMATIC IPC DiagBase
Currently no fix is planned
- Kein Fix geplantSIMATIC IPC DiagBase
Currently no fix is planned
- Kein Fix geplantSIMATIC IPC DiagMonitor
Currently no fix is planned
- Kein Fix geplantSIMATIC IPC DiagMonitor
Currently no fix is planned
- Kein Fix geplantSIMATIC IPC DiagMonitor
Currently no fix is planned
- Kein Fix geplantSIMATIC WinCC Runtime Advanced
Currently no fix is planned
- Kein Fix geplantSIMATIC WinCC Runtime Advanced
Currently no fix is planned
- Kein Fix geplantSIMATIC WinCC Runtime Advanced
Currently no fix is planned
- BehobenSIMATIC CP 1242-7 V2 (incl. SIPLUS variants)
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1242-7 V2 (incl. SIPLUS variants)
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1242-7 V2 (incl. SIPLUS variants)
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1243-1 (incl. SIPLUS variants)
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1243-1 (incl. SIPLUS variants)
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1243-1 (incl. SIPLUS variants)
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1243-1 IEC (incl. SIPLUS variants)
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1243-1 IEC (incl. SIPLUS variants)
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1243-1 IEC (incl. SIPLUS variants)
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1243-7 LTE
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1243-7 LTE
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1243-7 LTE
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Update to V3.5.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972735/ - BehobenSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Update to V2.4.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954889/ - BehobenSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Update to V2.4.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954889/ - BehobenSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Update to V2.4.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954889/ - BehobenTIM 1531 IRC (6GK7543-1MX00-0XE0)
Update to V2.4.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954889/ - BehobenTIM 1531 IRC (6GK7543-1MX00-0XE0)
Update to V2.4.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954889/ - BehobenTIM 1531 IRC (6GK7543-1MX00-0XE0)
Update to V2.4.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954889/ - WorkaroundSIMATIC CP 1242-7 V2 (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1242-7 V2 (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1242-7 V2 (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1243-1 (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1243-1 (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1243-1 (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1243-1 IEC (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1243-1 IEC (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1243-1 IEC (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1243-7 LTE
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1243-7 LTE
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1243-7 LTE
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Disable the web server of the affected system
- WorkaroundSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Disable the web server of the affected system
- WorkaroundSIMATIC HMI Comfort Panels (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIMATIC HMI Comfort Panels (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIMATIC HMI Comfort Panels (incl. SIPLUS variants)
Disable the web server of the affected system
- WorkaroundSIMATIC IPC DiagBase
Disable the web server of the affected system
- WorkaroundSIMATIC IPC DiagBase
Disable the web server of the affected system
- WorkaroundSIMATIC IPC DiagBase
Disable the web server of the affected system
- WorkaroundSIMATIC IPC DiagMonitor
Disable the web server of the affected system
- WorkaroundSIMATIC IPC DiagMonitor
Disable the web server of the affected system
- WorkaroundSIMATIC IPC DiagMonitor
Disable the web server of the affected system
- WorkaroundSIMATIC WinCC Runtime Advanced
Disable the web server of the affected system
- WorkaroundSIMATIC WinCC Runtime Advanced
Disable the web server of the affected system
- WorkaroundSIMATIC WinCC Runtime Advanced
Disable the web server of the affected system
- WorkaroundSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Disable the web server of the affected system
- WorkaroundSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Disable the web server of the affected system
- WorkaroundSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Disable the web server of the affected system
- WorkaroundTIM 1531 IRC (6GK7543-1MX00-0XE0)
Disable the web server of the affected system
- WorkaroundTIM 1531 IRC (6GK7543-1MX00-0XE0)
Disable the web server of the affected system
- WorkaroundTIM 1531 IRC (6GK7543-1MX00-0XE0)
Disable the web server of the affected system
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan