Siemens SIMATIC IPCs
Several Intel-CPU based SIMATIC IPCs are affected by an information exposure vulnerability (CVE-2022-40982) in the CPU that could allow an authenticated local user to potentially read other users' data [1]. The issue is also known as "Gather Data Sampling" (GDS) or Downfall Attacks. For details refer to the chapter "Additional Information". Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available. [1] https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-40982US | medium6.5 | — | ||
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to po… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-981975: Information Disclosure Vulnerability in Intel-CPUs (CVE-2022-40982) Impacting SIMATIC IPCs - CSAF Versionself
- SSA-981975: Information Disclosure Vulnerability in Intel-CPUs (CVE-2022-40982) Impacting SIMATIC IPCs - HTML Versionself
- ICS Advisory ICSA-23-257-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-257-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (22)
- MitigationSIMATIC Field PG M6
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts
- MitigationSIMATIC IPC BX-39A
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts
- MitigationSIMATIC IPC PX-39A
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts
- MitigationSIMATIC IPC PX-39A PRO
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts
- MitigationSIMATIC IPC RW-543A
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts
- MitigationSIMATIC IPC1047
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts
- MitigationSIMATIC IPC1047E
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts
- MitigationSIMATIC IPC627E
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts
- MitigationSIMATIC IPC647E
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts
- MitigationSIMATIC IPC677E
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts
- MitigationSIMATIC IPC847E
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts
- Kein Fix geplantSIMATIC IPC1047
Currently no fix is planned
- BehobenSIMATIC Field PG M6
Update to V26.01.11 or later version
- BehobenSIMATIC IPC BX-39A
Update to V29.01.04 or later version
- BehobenSIMATIC IPC PX-39A
Update to V29.01.04 or later version
- BehobenSIMATIC IPC PX-39A PRO
Update to V29.01.04 or later version
- BehobenSIMATIC IPC RW-543A
Update to V1.1.2 or later version
- BehobenSIMATIC IPC1047E
Update to V4.2 or later version
- BehobenSIMATIC IPC627E
Update to V25.02.14 or later version
- BehobenSIMATIC IPC647E
Update to V25.02.14 or later version
- BehobenSIMATIC IPC677E
Update to V25.02.14 or later version
- BehobenSIMATIC IPC847E
Update to V25.02.14 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan