Siemens SIMATIC S7-1500
Intel has published information on vulnerabilities in Intel products in November 2020. This advisory lists the Siemens Controllers that are affected by these vulnerabilities. In this advisory we take a representative CVE from each advisory: - “Intel CSME, SPS, TXE, AMT and DAL Advisory” Intel-SA-00391 is represented by CVE-2020-8744 - “BIOS Advisory” Intel-SA-00358 is represented by CVE-2020-0591. Siemens is currently working on BIOS updates that include chipset microcode updates and recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-8744US | high7.8 | — | ||
Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions bef… | ||||
| CVE-2020-0591US | medium6.7 | — | ||
Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-501073: Vulnerabilities in Controllers CPU 1518 MFP using Intel CPUs (November 2020) - CSAF Versionself
- SSA-501073: Vulnerabilities in Controllers CPU 1518 MFP using Intel CPUs (November 2020) - PDF Versionself
- SSA-501073: Vulnerabilities in Controllers CPU 1518 MFP using Intel CPUs (November 2020) - TXT Versionself
- ICS Advisory ICSA-21-131-15 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-131-15 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (8)
- MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)
Avoid to run untrusted code on affected systems
- MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)
Avoid to run untrusted code on affected systems
- MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Avoid to run untrusted code on affected systems
- MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Avoid to run untrusted code on affected systems
- Kein Fix geplantSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)
Currently no remediation is planned
- Kein Fix geplantSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)
Currently no remediation is planned
- Kein Fix geplantSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Currently no remediation is planned
- Kein Fix geplantSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Currently no remediation is planned
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan