Siemens SIMATIC STEP 7 DLL Vulnerability
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2012-3015US | medium6.9 | — | ||
Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local users to gain privileges v… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-12-205-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-12-205-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationSIMATIC PCS 7
Siemens has provided the STEP 7 software update V5.5 SP1 (equivalent to V5.5.1) that resolves the vulnerability, but recommends that the latest Service Pack, V5.5 SP2,Service Pack 2 for STEP 7 V5.5 and STEP 7 Professional 2010, (http://support.automation.siemens.com/WW/view/en/57026339). be installed as soon as possible. SIMATIC PCS 7 users should also apply this update.
http://support.automation.siemens.com/WW/view/en/57026339 - MitigationSIMATIC STEP 7
Siemens has provided the STEP 7 software update V5.5 SP1 (equivalent to V5.5.1) that resolves the vulnerability, but recommends that the latest Service Pack, V5.5 SP2,Service Pack 2 for STEP 7 V5.5 and STEP 7 Professional 2010, (http://support.automation.siemens.com/WW/view/en/57026339). be installed as soon as possible. SIMATIC PCS 7 users should also apply this update.
http://support.automation.siemens.com/WW/view/en/57026339
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan