Siemens Industrial Products
Several industrial products contain an out of bounds read vulnerability that could allow an attacker to cause a Blue Screen of Death (BSOD) crash of the underlying Windows kernel, leading to denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-46280US | — | — | ||
A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All versions < V5.0 SP2), SIMATIC BATCH V9.1 (All versions < V9.1… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-962515: Out of Bounds Read Vulnerability in Industrial Products - CSAF Versionself
- SSA-962515: Out of Bounds Read Vulnerability in Industrial Products - HTML Versionself
- ICS Advisory ICSA-24-137-13 JSONself
- ICS Advisory ICSA-24-137-13 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (32)
- Kein Fix geplantSIMATIC NET PC Software V17
Currently no fix is planned
- Kein Fix geplantSIMATIC WinCC OA V3.17
Currently no fix is planned
- Kein Fix geplantSIMATIC WinCC V7.4
Currently no fix is planned
- Kein Fix geplantSecurity Configuration Tool (SCT)
Currently no fix is planned
- Kein Fix geplantTotally Integrated Automation Portal (TIA Portal) V15.1
Currently no fix is planned
- Kein Fix geplantTotally Integrated Automation Portal (TIA Portal) V16
Currently no fix is planned
- BehobenSIMATIC Automation Tool
Update to V5.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/98161300/ - BehobenSIMATIC BATCH V9.1
Update to V9.1 SP2 Upd5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812242/ - BehobenSIMATIC NET PC Software V16
Update to V16 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974091/ - BehobenSIMATIC NET PC Software V18
Update to V18 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972655/ - BehobenSIMATIC NET PC Software V19
Update to V19 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975600/ - BehobenSIMATIC PCS 7 V9.1
Update to V9.1 SP2 UC05 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812242/ - BehobenSIMATIC PDM V9.2
Update to V9.2 SP2 Upd3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812242/ - BehobenSIMATIC Route Control V9.1
Update to V9.1 SP2 Upd3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812242/ - BehobenSIMATIC S7-PCT
Update to V3.5 SP3 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/32469496/ - BehobenSIMATIC STEP 7 V5
Update to V5.7 SP3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109973519/ - BehobenSIMATIC WinCC OA V3.18
Update to V3.18 P025 or later version
https://www.winccoa.com/downloads/category/versions-patches.html - BehobenSIMATIC WinCC OA V3.19
Update to V3.19 P010 or later version
https://www.winccoa.com/downloads/category/versions-patches.html - BehobenSIMATIC WinCC Runtime Advanced
Update to V17 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800912/ - BehobenSIMATIC WinCC Runtime Professional V16
Update to V16 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776017/ - BehobenSIMATIC WinCC Runtime Professional V17
Update to V17 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800913/ - BehobenSIMATIC WinCC Runtime Professional V18
Update to V18 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807225/ - BehobenSIMATIC WinCC Runtime Professional V19
Update to V19 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109820999/ - BehobenSIMATIC WinCC V7.5
Update to V7.5 SP2 Update 17 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793460/ - BehobenSIMATIC WinCC V8.0
Update to V8.0 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109818723/ - BehobenSINAMICS Startdrive
Update to V19 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109963196/ - BehobenSINUMERIK ONE virtual
Update to V6.23 or later version
- BehobenSINUMERIK PLC Programming Tool
Update to V3.3.12 or later version PLC Programming Tool V3.3.12 or later versions are integrated in SINUMERIK 828D Toolbox version V5.24 or later; Updated software version can be obtained from Siemens customer support or a local partner.
- BehobenTIA Portal Cloud Connector
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780755/ - BehobenTotally Integrated Automation Portal (TIA Portal) V17
Update to V17 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800912/ - BehobenTotally Integrated Automation Portal (TIA Portal) V18
Update to V18 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/ - BehobenTotally Integrated Automation Portal (TIA Portal) V19
Update to V19 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan