ICSA-21-131-06

Siemens SNMP Implementation of WinCC Runtime

Advisory ansehen veröffentlicht 2021-05-11

A denial-of-service vulnerability in WinCC Runtime could allow an unauthenticated attacker with network access to cause a denial-of-service condition in the SNMP service by sending crafted SNMP packets to port 161/udp. Siemens has released updates for the affected products and recommends to update to the latest versions.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2019-19276US	medium5.3	1.02% (63rd)	—	2021-05-12
A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels (All versions…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Behebungen (4)

MitigationSIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants)
Disable SNMP if this is supported by the product. Disabling SNMP fully mitigates the vulnerability
MitigationSIMATIC HMI KTP Mobile Panels
Disable SNMP if this is supported by the product. Disabling SNMP fully mitigates the vulnerability
BehobenSIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants)
Update to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/
BehobenSIMATIC HMI KTP Mobile Panels
Update to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan