Siemens SIMATIC ET 200SP Communication Processors
SIMATIC ET 200SP communication processors (CP 1542SP-1, CP 1542SP-1 IRC and CP 1543SP-1, incl. SIPLUS variants) contain an authentication vulnerability that could allow an unauthenticated remote attacker to access the configuration data. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40771US | —OT erhöht | — | ||
A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.4.24), SIM… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-486936: Authentication Vulnerability in SIMATIC ET 200SP Communication Processors - CSAF Versionself
- SSA-486936: Authentication Vulnerability in SIMATIC ET 200SP Communication Processors - HTML Versionself
- ICS Advisory ICSA-25-289-07 JSONself
- ICS Advisory ICSA-25-289-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (12)
- MitigationSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Restrict access to the affected systems to trusted IP addresses only
- MitigationSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Restrict access to the affected systems to trusted IP addresses only
- MitigationSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Restrict access to the affected systems to trusted IP addresses only
- MitigationSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Restrict access to the affected systems to trusted IP addresses only
- MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Restrict access to the affected systems to trusted IP addresses only
- MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Restrict access to the affected systems to trusted IP addresses only
- BehobenSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Update to V2.4.24 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995159/ - BehobenSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Update to V2.4.24 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995159/ - BehobenSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Update to V2.4.24 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995159/ - BehobenSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Update to V2.4.24 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995159/ - BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Update to V2.4.24 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995159/ - BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Update to V2.4.24 or later version
https://support.industry.siemens.com/cs/ww/en/view/109995159/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan