Siemens SIRIUS
SIRIUS 3SK2 Safety Relays and 3RK3 Modular Safety Systems only provide weak password obfuscation. An attacker with access to the PROFINET or serial interface of the device could eavesdrop or read the stored password from the device and de-obfuscate it. The safety passwords work as protection against unauthorized operation (i.e., protection against inadvertent operating errors) but not as protection against malicious access attempts. Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-24009US | — | — | ||
A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions). The affected devices do not require authent… | ||||
| CVE-2025-24008US | —OT erhöht | — | ||
A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions). The affected devices do not encrypt data in… | ||||
| CVE-2025-24007US | —OT erhöht | — | ||
A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions). Affected devices only provide weak password… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-222768: Multiple Vulnerabilities in SIRIUS 3SK2 Safety Relays and 3RK3 Modular Safety Systems - CSAF Versionself
- SSA-222768: Multiple Vulnerabilities in SIRIUS 3SK2 Safety Relays and 3RK3 Modular Safety Systems - HTML Versionself
- ICS Advisory ICSA-25-135-13 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-135-13 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (12)
- MitigationSIRIUS 3RK3 Modular Safety System (MSS)
Ensure network isolation of the PROFINET interface to prevent access from unauthorized systems
- MitigationSIRIUS 3RK3 Modular Safety System (MSS)
Ensure network isolation of the PROFINET interface to prevent access from unauthorized systems
- MitigationSIRIUS 3RK3 Modular Safety System (MSS)
Ensure network isolation of the PROFINET interface to prevent access from unauthorized systems
- MitigationSIRIUS Safety Relays 3SK2
Ensure network isolation of the PROFINET interface to prevent access from unauthorized systems
- MitigationSIRIUS Safety Relays 3SK2
Ensure network isolation of the PROFINET interface to prevent access from unauthorized systems
- MitigationSIRIUS Safety Relays 3SK2
Ensure network isolation of the PROFINET interface to prevent access from unauthorized systems
- Kein Fix geplantSIRIUS 3RK3 Modular Safety System (MSS)
Currently no fix is planned
- Kein Fix geplantSIRIUS 3RK3 Modular Safety System (MSS)
Currently no fix is planned
- Kein Fix geplantSIRIUS 3RK3 Modular Safety System (MSS)
Currently no fix is planned
- Kein Fix verfügbarSIRIUS Safety Relays 3SK2
Currently no fix is available
- Kein Fix verfügbarSIRIUS Safety Relays 3SK2
Currently no fix is available
- Kein Fix verfügbarSIRIUS Safety Relays 3SK2
Currently no fix is available
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan