ICSA-22-132-12

icsaUScisa_csaf_ot

Siemens Industrial Products

Advisory ansehen veröffentlicht 2022-05-10

A vulnerability has been identified in the OPC Foundation Local Discovery Server (LDS) [0] of several industrial products. The vulnerability could cause a denial of service condition on the service or the device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available. [0] https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2021-40142.pdf

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-40142UShigh7.5—
In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefully crafted messages that lead to Access o…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (20)

  • MitigationOpenPCS 7 V9.1

    Deactivate the OPC LDS Service if supported by the product use case. The LDS service is not activated in the default configuration

  • MitigationSIMATIC NET PC Software V14

    Deactivate the OPC LDS Service if supported by the product use case. The LDS service is not activated in the default configuration

  • MitigationSIMATIC NET PC Software V15

    Deactivate the OPC LDS Service if supported by the product use case. The LDS service is not activated in the default configuration

  • MitigationSIMATIC NET PC Software V16

    Deactivate the OPC LDS Service if supported by the product use case. The LDS service is not activated in the default configuration

  • MitigationSIMATIC NET PC Software V17

    Deactivate the OPC LDS Service if supported by the product use case. The LDS service is not activated in the default configuration

  • MitigationSIMATIC Process Historian OPC UA Server

    Deactivate the OPC LDS Service if supported by the product use case. The LDS service is not activated in the default configuration

  • MitigationSIMATIC WinCC

    Deactivate the OPC LDS Service if supported by the product use case. The LDS service is not activated in the default configuration

  • MitigationSIMATIC WinCC Runtime Professional

    Deactivate the OPC LDS Service if supported by the product use case. The LDS service is not activated in the default configuration

  • MitigationSIMATIC WinCC Unified PC Runtime V18

    Deactivate the OPC LDS Service if supported by the product use case. The LDS service is not activated in the default configuration

  • MitigationTeleControl Server Basic V3

    Deactivate the OPC LDS Service if supported by the product use case. The LDS service is not activated in the default configuration

  • Kein Fix geplantOpenPCS 7 V9.1

    Currently no fix is planned

  • Kein Fix geplantSIMATIC NET PC Software V15

    Currently no fix is planned

  • BehobenSIMATIC NET PC Software V14

    Update to V14 SP1 Update 14 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109807351/
  • BehobenSIMATIC NET PC Software V16

    Update to V16 Update 6 or later version

  • BehobenSIMATIC NET PC Software V17

    Update to V17 SP1 or later version

  • BehobenSIMATIC Process Historian OPC UA Server

    For PCS 7: Update to PCS 7 V9.1 SP1 ( https://support.industry.siemens.com/cs/ww/en/view/109805073/)

  • BehobenSIMATIC WinCC

    Update to V8.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109816599/
  • BehobenSIMATIC WinCC Runtime Professional

    Update to V18 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109813587/
  • BehobenSIMATIC WinCC Unified PC Runtime V18

    Update to V18 Update 1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109807123/
  • BehobenTeleControl Server Basic V3

    Update to V3.1.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109812231/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan