Siemens Siemens Engineering Platforms
Affected products do not properly sanitize user-controllable input when parsing files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. Siemens has released products based on the Totally Integrated Automation Portal (TIA Portal) V20 which are not affected by CVE-2024-49849. See the chapter "Additional Information" below for more details.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-49849US | — | — | ||
A vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 Safety V16 (All versions), SIMATIC STEP 7 Safety V… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-800126: Deserialization Vulnerability in Siemens Engineering Platforms before V20 - CSAF Versionself
- SSA-800126: Deserialization Vulnerability in Siemens Engineering Platforms before V20 - HTML Versionself
- ICS Advisory ICSA-24-347-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-347-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (78)
- MitigationSIMATIC S7-PLCSIM V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC S7-PLCSIM V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 Safety V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 Safety V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 Safety V18
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 Safety V19
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 V18
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 V19
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC WinCC Unified V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC WinCC Unified V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC WinCC Unified V18
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC WinCC Unified V19
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC WinCC V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC WinCC V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC WinCC V18
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC WinCC V19
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMOCODE ES V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMOCODE ES V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMOCODE ES V18
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMOCODE ES V19
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMOTION SCOUT TIA V5.4
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMOTION SCOUT TIA V5.5
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMOTION SCOUT TIA V5.6
Avoid opening untrusted files from unknown sources in affected products
- MitigationSINAMICS Startdrive V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationSINAMICS Startdrive V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationSINAMICS Startdrive V18
Avoid opening untrusted files from unknown sources in affected products
- MitigationSINAMICS Startdrive V19
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIRIUS Safety ES V17 (TIA Portal)
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIRIUS Safety ES V18 (TIA Portal)
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIRIUS Safety ES V19 (TIA Portal)
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIRIUS Soft Starter ES V17 (TIA Portal)
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIRIUS Soft Starter ES V18 (TIA Portal)
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIRIUS Soft Starter ES V19 (TIA Portal)
Avoid opening untrusted files from unknown sources in affected products
- MitigationTIA Portal Cloud V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationTIA Portal Cloud V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationTIA Portal Cloud V18
Avoid opening untrusted files from unknown sources in affected products
- MitigationTIA Portal Cloud V19
Avoid opening untrusted files from unknown sources in affected products
- Kein Fix geplantSIMATIC S7-PLCSIM V16
Currently no fix is planned
- Kein Fix geplantSIMATIC S7-PLCSIM V17
Currently no fix is planned
- Kein Fix geplantSIMATIC STEP 7 Safety V16
Currently no fix is planned
- Kein Fix geplantSIMATIC STEP 7 V16
Currently no fix is planned
- Kein Fix geplantSIMATIC WinCC Unified V16
Currently no fix is planned
- Kein Fix geplantSIMATIC WinCC V16
Currently no fix is planned
- Kein Fix geplantSIMOCODE ES V16
Currently no fix is planned
- Kein Fix geplantSINAMICS Startdrive V16
Currently no fix is planned
- Kein Fix geplantTIA Portal Cloud V16
Currently no fix is planned
- Kein Fix verfügbarSIMATIC STEP 7 Safety V17
Currently no fix is available
- Kein Fix verfügbarSIMATIC STEP 7 Safety V18
Currently no fix is available
- Kein Fix verfügbarSIMATIC STEP 7 V17
Currently no fix is available
- Kein Fix verfügbarSIMATIC STEP 7 V18
Currently no fix is available
- Kein Fix verfügbarSIMATIC WinCC Unified V17
Currently no fix is available
- Kein Fix verfügbarSIMATIC WinCC Unified V18
Currently no fix is available
- Kein Fix verfügbarSIMATIC WinCC V17
Currently no fix is available
- Kein Fix verfügbarSIMATIC WinCC V18
Currently no fix is available
- Kein Fix verfügbarSIMOCODE ES V17
Currently no fix is available
- Kein Fix verfügbarSIMOCODE ES V18
Currently no fix is available
- Kein Fix verfügbarSIMOCODE ES V19
Currently no fix is available
- Kein Fix verfügbarSIMOTION SCOUT TIA V5.4
Currently no fix is available
- Kein Fix verfügbarSIMOTION SCOUT TIA V5.5
Currently no fix is available
- Kein Fix verfügbarSINAMICS Startdrive V17
Currently no fix is available
- Kein Fix verfügbarSINAMICS Startdrive V18
Currently no fix is available
- Kein Fix verfügbarSINAMICS Startdrive V19
Currently no fix is available
- Kein Fix verfügbarSIRIUS Safety ES V17 (TIA Portal)
Currently no fix is available
- Kein Fix verfügbarSIRIUS Safety ES V18 (TIA Portal)
Currently no fix is available
- Kein Fix verfügbarSIRIUS Safety ES V19 (TIA Portal)
Currently no fix is available
- Kein Fix verfügbarSIRIUS Soft Starter ES V17 (TIA Portal)
Currently no fix is available
- Kein Fix verfügbarSIRIUS Soft Starter ES V18 (TIA Portal)
Currently no fix is available
- Kein Fix verfügbarSIRIUS Soft Starter ES V19 (TIA Portal)
Currently no fix is available
- Kein Fix verfügbarTIA Portal Cloud V17
Currently no fix is available
- Kein Fix verfügbarTIA Portal Cloud V18
Currently no fix is available
- BehobenSIMATIC STEP 7 Safety V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/ - BehobenSIMATIC STEP 7 V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/ - BehobenSIMATIC WinCC Unified V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/ - BehobenSIMATIC WinCC V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/ - BehobenSIMOTION SCOUT TIA V5.6
Update to V5.6 SP1 HF7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989067/ - BehobenTIA Portal Cloud V19
TIA Portal Cloud V5.2.1.1 or later version updated TIA Portal to V19 Update 4 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan