Siemens SIMOTICS, Desigo, APOGEE, and TALON
SIMOTICS CONNECT 400, Desigo (Power PC-based), APOGEE MEC/MBC/PXC and TALON TC products are affected by a DHCP Client vulnerability as initially reported in SSA-434032 for the Mentor Nucleus Networking Module. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-13939US | medium4.8 | — | ||
A vulnerability has been identified in APOGEE MEC/MBC/PXC (P2) (All versions < V2.8.2), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All v… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-162506: DHCP Client Vulnerability in SIMOTICS CONNECT 400, Desigo PXC/PXM, APOGEE MEC/MBC/PXC, APOGEE PXC Series, and TALON TC Series - CSAF Versionself
- SSA-162506: DHCP Client Vulnerability in SIMOTICS CONNECT 400, Desigo PXC/PXM, APOGEE MEC/MBC/PXC, APOGEE PXC Series, and TALON TC Series - HTML Versionself
- ICS Advisory ICSA-20-105-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-105-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (42)
- MitigationAPOGEE MEC/MBC/PXC (P2)
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationAPOGEE PXC Compact (BACnet)
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationAPOGEE PXC Compact (P2 Ethernet)
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationAPOGEE PXC Modular (BACnet)
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationAPOGEE PXC Modular (P2 Ethernet)
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC00-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC00-U
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC001-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC100-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC12-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC128-U
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC200-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC22-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC22.1-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC36.1-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC50-E.D
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC64-U
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXM20-E
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationSIMOTICS CONNECT 400
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationTALON TC Compact (BACnet)
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationTALON TC Modular (BACnet)
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- Kein Fix geplantAPOGEE MEC/MBC/PXC (P2)
Currently no fix is planned
- BehobenAPOGEE PXC Compact (BACnet)
Update to V3.5.3 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Compact (P2 Ethernet)
Update to V2.8.19 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Modular (BACnet)
Update to V3.5.3 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Modular (P2 Ethernet)
Update to V2.8.19 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenDesigo PXC00-E.D
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC00-U
Update to V6.00.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC001-E.D
Update to V6.00.327 or later version
- BehobenDesigo PXC100-E.D
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC12-E.D
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC128-U
Update to V6.00.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC200-E.D
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC22-E.D
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC22.1-E.D
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC36.1-E.D
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC50-E.D
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC64-U
Update to V6.00.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXM20-E
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenSIMOTICS CONNECT 400
Update to V0.3.0.330 or later version
https://support.industry.siemens.com/cs/ww/en/view/109778383/ - BehobenTALON TC Compact (BACnet)
Update to V3.5.3 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenTALON TC Modular (BACnet)
Update to V3.5.3 or later version
https://partnerportal.extranet.dc.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan