ICSA-16-355-01

icsaUScisa_csaf_ot

Siemens Desigo PX Web Module Insufficient Entropy Vulnerability

Advisory ansehen veröffentlicht 2016-09-23

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2016-9154UShigh7.5—
Siemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D (All firmware versions < V6.00.046) and…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (21)

  • MitigationDesigo PX Web module PXA30-W0 firmware for Desigo PX automation controllers PXC00-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA30-W0 firmware for Desigo PX automation controllers PXC128-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA30-W0 firmware for Desigo PX automation controllers PXC64-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA30-W1 firmware for Desigo PX automation controllers PXC00-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA30-W1 firmware for Desigo PX automation controllers PXC128-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA30-W1 firmware for Desigo PX automation controllers PXC64-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA30-W2 firmware for Desigo PX automation controllers PXC00-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA30-W2 firmware for Desigo PX automation controllers PXC128-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA30-W2 firmware for Desigo PX automation controllers PXC64-U

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W0 firmware for Desigo PX automation controllers PXC00-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W0 firmware for Desigo PX automation controllers PXC100-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W0 firmware for Desigo PX automation controllers PXC200-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W0 firmware for Desigo PX automation controllers PXC50-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W1 firmware for Desigo PX automation controllers PXC00-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W1 firmware for Desigo PX automation controllers PXC100-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W1 firmware for Desigo PX automation controllers PXC200-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W1 firmware for Desigo PX automation controllers PXC50-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W2 firmware for Desigo PX automation controllers PXC00-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W2 firmware for Desigo PX automation controllers PXC100-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W2 firmware for Desigo PX automation controllers PXC200-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

  • MitigationDesigo PX Web module PXA40-W2 firmware for Desigo PX automation controllers PXC50-E.D

    Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan