ICSA-16-040-02

icsaUScisa_csaf_ot

Siemens SIMATIC S7-1500 CPU Vulnerabilities

Advisory ansehen veröffentlicht 2016-11-12

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2016-2201USmedium5.3—
Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102.
CVE-2016-2200UShigh7.5—
Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service (STOP mode transition) via crafted packets on TCP port 102.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (2)

  • MitigationSIMATIC S7-1500 CPU family

    Siemens has released SIMATIC S7-1500 firmware Version 1.8.3, which addresses the identified vulnerabilities and recommends that users update to the new firmware version, which is available at the following URL (https://support.industry.siemens.com/cs/de/en/view/109478459)

    https://support.industry.siemens.com/cs/de/en/view/109478459
  • MitigationSIMATIC S7-1500 CPU family

    Siemens has released SIMATIC S7-1500 firmware Version 1.8.3, which addresses the identified vulnerabilities and recommends that users update to the new firmware version, which is available at the following URL (https://support.industry.siemens.com/cs/de/en/view/109478459)

    https://support.industry.siemens.com/cs/de/en/view/109478459
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan