Siemens SINUMERIK
A vulnerability has been identified in the integrated S7-1500 CPU of SINUMERIK ONE and SINUMERIK MC products that could allow an attacker to cause a denial of service condition. In order to exploit the vulnerability, an attacker must have access to the affected devices on port 102/tcp. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Note: The affected integrated S7-1500 CPUs and related products are advised in [1]. [1] https://cert-portal.siemens.com/productcert/html/ssa-592380.html
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-46156US | — | — | ||
Affected devices improperly handle specially crafted packets sent to port 102/tcp.
This could allow an attacker to create a denial of service condition. A restart is needed to res… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-280603: Denial of Service Vulnerability in SINUMERIK ONE and SINUMERIK MC - CSAF Versionself
- SSA-280603: Denial of Service Vulnerability in SINUMERIK ONE and SINUMERIK MC - HTML Versionself
- ICS Advisory ICSA-23-348-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-348-11 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationSINUMERIK MC
Expose port 102/tcp of the integrated S7-1500 CPU only to trusted network environments
- MitigationSINUMERIK ONE
Expose port 102/tcp of the integrated S7-1500 CPU only to trusted network environments
- BehobenSINUMERIK MC
Update to V1.24 or later version
- BehobenSINUMERIK ONE
Update to V6.24 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan