SSA-434535: Memory Protection Bypass Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives
Several models of SINAMICS PERFECT HARMONY GH180 Drives are affected by a memory protection bypass vulnerability in the integrated S7-1500 or S7-1200 CPU that could allow an attacker to write arbitrary data and code to protected memory areas or read sensitive data to launch further attacks on the CPU. Siemens provides new drives with the fix included and recommends specific countermeasures for older drives. The list of affected drive models can be found in the section "Additional Information".
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-15782US | critical9.8 | — | ||
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-434535: Memory Protection Bypass Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives - CSAF Versionself
- SSA-434535: Memory Protection Bypass Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives - PDF Versionself
- SSA-434535: Memory Protection Bypass Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives - TXT Versionself
Behebungen (2)
- MitigationSINAMICS PERFECT HARMONY GH180 Drives
Avoid compromise of the individually configured access protection password to the S7-1500 or S7-1200 CPU
- BehobenSINAMICS PERFECT HARMONY GH180 Drives
Drives manufactured on 2021-08-13 or later are not affected, as they contain a corrected version of the S7-1500 or S7-1200 CPU.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan