Siemens SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional, and SIMATIC NET PC Software (Update G)
A Denial-of-Service vulnerability has been identified in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC-Software. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-4832US | high7.5 | — | ||
A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All vers… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-348629: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC Software - CSAF Versionself
- SSA-348629: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC Software - PDF Versionself
- SSA-348629: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC Software - TXT Versionself
- ICS Advisory ICSA-18-088-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-18-088-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (54)
- MitigationOpenPCS 7 V7.1 and earlier
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationOpenPCS 7 V8.0
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationOpenPCS 7 V8.1
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationOpenPCS 7 V8.2
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationOpenPCS 7 V9.0
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC BATCH V7.1 and earlier
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC BATCH V8.0
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC BATCH V8.1
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC BATCH V8.2
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC BATCH V9.0
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC NET PC Software V14
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC NET PC Software V15
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC PCS 7 V7.1 and earlier
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC PCS 7 V8.0
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC PCS 7 V8.1
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC PCS 7 V8.2
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC PCS 7 V9.0
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC Route Control V7.1 and earlier
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC Route Control V8.0
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC Route Control V8.1
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC Route Control V8.2
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC Route Control V9.0
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC WinCC Runtime Professional V13
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC WinCC Runtime Professional V14
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC WinCC V7.2 and earlier
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC WinCC V7.3
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- MitigationSIMATIC WinCC V7.4
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
- Kein Fix geplantOpenPCS 7 V7.1 and earlier
Currently no fix is planned
- Kein Fix geplantOpenPCS 7 V8.0
Currently no fix is planned
- Kein Fix geplantSIMATIC BATCH V7.1 and earlier
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS 7 V7.1 and earlier
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS 7 V8.0
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS 7 V8.1
Currently no fix is planned
- Kein Fix geplantSIMATIC Route Control V7.1 and earlier
Currently no fix is planned
- Kein Fix geplantSIMATIC Route Control V8.0
Currently no fix is planned
- Kein Fix geplantSIMATIC Route Control V8.1
Currently no fix is planned
- BehobenOpenPCS 7 V8.1
Update to OpenPCS 7 V8.1 Upd 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109761055 - BehobenOpenPCS 7 V8.2
See remediation for PCS 7 V8.2
- BehobenOpenPCS 7 V9.0
See remediation for PCS 7 V9.0
- BehobenSIMATIC BATCH V8.0
Update to SIMATIC BATCH V8.0 SP1 Upd21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109756847 - BehobenSIMATIC BATCH V8.1
Update to SIMATIC BATCH V8.1 SP1 Upd16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109756846 - BehobenSIMATIC BATCH V8.2
Update to SIMATIC BATCH V8.2 Upd10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757796 - BehobenSIMATIC BATCH V9.0
See remediation for PCS 7 V9.0
- BehobenSIMATIC NET PC Software V14
Update to V14 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807351/ - BehobenSIMATIC NET PC Software V15
Update to V15 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109762690 - BehobenSIMATIC PCS 7 V8.2
Update to V8.2 SP1 or later version
- BehobenSIMATIC PCS 7 V9.0
Update to V9.0 SP1 (Includes Open PCS 7 V9.0 Upd1, SIMATIC Batch V9.0 SP1, SIMATIC Route Control V9.0 Upd1 and SIMATIC WinCC V7.4 SP1 Upd4).
- BehobenSIMATIC Route Control V8.2
See remediation for PCS 7 V8.2
- BehobenSIMATIC Route Control V9.0
See remediation for PCS 7 V9.0
- BehobenSIMATIC WinCC Runtime Professional V13
Update to V13 SP2 Upd2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759753 - BehobenSIMATIC WinCC Runtime Professional V14
Update to V14 SP1 Upd5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109747394 - BehobenSIMATIC WinCC V7.2 and earlier
Update to WinCC 7.2 Upd 15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109762887 - BehobenSIMATIC WinCC V7.3
Update to WinCC 7.3 Upd 16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109756123 - BehobenSIMATIC WinCC V7.4
Update to V7.4 SP1 Upd 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109753031
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan