Siemens SIMATIC Software Products
Multiple SIMATIC Software products are affected by a vulnerability that could allow an attacker to manipulate project files and remotely execute code. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-31893US | high7.8 | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-641963: Remote Code Execution Vulnerability in Multiple SIMATIC Software Products - CSAF Versionself
- SSA-641963: Remote Code Execution Vulnerability in Multiple SIMATIC Software Products - PDF Versionself
- SSA-641963: Remote Code Execution Vulnerability in Multiple SIMATIC Software Products - TXT Versionself
- ICS Advisory ICSA-21-194-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-194-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (10)
- Kein Fix verfügbarSIMATIC PCS 7 V8.2 and earlier
Currently no remediation is available
- BehobenSIMATIC PCS 7 V9.0
Update to V9.0 SP3 or later version
- BehobenSIMATIC PDM
Update to V9.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794361/ - BehobenSIMATIC STEP 7 V5.X
Update to V5.6 SP2 HF3 or later version
https://support.industry.siemens.com/cs/de/en/view/109779992/ - BehobenSINAMICS STARTER (containing STEP 7 OEM version)
Update to V5.4 HF2 or later version
https://support.industry.siemens.com/cs/us/en/view/109782792/ - WorkaroundSIMATIC PCS 7 V8.2 and earlier
Only use project files from trusted sources
- WorkaroundSIMATIC PCS 7 V9.0
Only use project files from trusted sources
- WorkaroundSIMATIC PDM
Only use project files from trusted sources
- WorkaroundSIMATIC STEP 7 V5.X
Only use project files from trusted sources
- WorkaroundSINAMICS STARTER (containing STEP 7 OEM version)
Only use project files from trusted sources
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan