ICSA-16-208-01C

icsaUScisa_csaf_ot

Siemens SIMATIC WinCC, PCS 7, and WinCC Runtime Professional Vulnerabilities (Update C)

Advisory ansehen veröffentlicht 2016-04-29

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2016-5744UShigh7.5—
Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary WinCC station files via crafted packets.
CVE-2016-5743UScritical9.8—
Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (14)

  • MitigationSIMATIC PCS 7 (WinCC, Batch, Route Control, OPEN PCS 7)

    Apply up-to-date application whitelisting software and virus scanners.

  • MitigationSIMATIC PCS 7 (WinCC, Batch, Route Control, OPEN PCS 7)

    Apply up-to-date application whitelisting software and virus scanners.

  • MitigationSIMATIC WinCC 7.0 SP2

    Apply up-to-date application whitelisting software and virus scanners.

  • MitigationSIMATIC WinCC 7.0 SP2

    Apply up-to-date application whitelisting software and virus scanners.

  • MitigationSIMATIC WinCC 7.0 SP3

    Apply up-to-date application whitelisting software and virus scanners.

  • MitigationSIMATIC WinCC 7.0 SP3

    Apply up-to-date application whitelisting software and virus scanners.

  • MitigationSIMATIC WinCC 7.2

    Apply up-to-date application whitelisting software and virus scanners.

  • MitigationSIMATIC WinCC 7.2

    Apply up-to-date application whitelisting software and virus scanners.

  • MitigationSIMATIC WinCC 7.3

    Apply up-to-date application whitelisting software and virus scanners.

  • MitigationSIMATIC WinCC 7.3

    Apply up-to-date application whitelisting software and virus scanners.

  • MitigationSIMATIC WinCC 7.4

    Apply up-to-date application whitelisting software and virus scanners.

  • MitigationSIMATIC WinCC 7.4

    Apply up-to-date application whitelisting software and virus scanners.

  • MitigationSIMATIC WinCC Runtime Professional

    Apply up-to-date application whitelisting software and virus scanners.

  • MitigationSIMATIC WinCC Runtime Professional

    Apply up-to-date application whitelisting software and virus scanners.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan