ICSA-15-064-02

icsaUScisa_csaf_ot

Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths

Advisory ansehen veröffentlicht 2015-12-06

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2015-1594USmedium6.9—
Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2 before…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (15)

  • MitigationCFC V8.0 SP4

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationCFC V8.1

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationPCS 7 V8.0 SP2

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationPCS 7 with STEP 7 CFC V8.1 Upd1

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationPCS 7 with STEP 7 SP4 HF4

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSIMATIC CFC

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSIMATIC PCS 7 (as STEP 7 and CFC are incorporated)

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSIMATIC ProSave

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSIMATIC STEP 7 V5.5

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSIMOTION Scout

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSTARTER

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSTEP 7 V5.5 SP1

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSTEP 7 V5.5 SP2

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSTEP 7 V5.5 SP3

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSTEP 7 V5.5 SP4

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan