SSA-501073: Vulnerabilities in Controllers CPU 1518 MFP using Intel CPUs (November 2020)
Intel has published information on vulnerabilities in Intel products in November 2020. This advisory lists the Siemens Controllers that are affected by these vulnerabilities. In this advisory we take a representative CVE from each advisory: - “Intel CSME, SPS, TXE, AMT and DAL Advisory” Intel-SA-00391 is represented by CVE-2020-8744 - “BIOS Advisory” Intel-SA-00358 is represented by CVE-2020-0591. Siemens is currently working on BIOS updates that include chipset microcode updates and recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-8744US | high7.8 | — | ||
Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions bef… | ||||
| CVE-2020-0591US | medium6.7 | — | ||
Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-501073: Vulnerabilities in Controllers CPU 1518 MFP using Intel CPUs (November 2020) - CSAF Versionself
- SSA-501073: Vulnerabilities in Controllers CPU 1518 MFP using Intel CPUs (November 2020) - PDF Versionself
- SSA-501073: Vulnerabilities in Controllers CPU 1518 MFP using Intel CPUs (November 2020) - TXT Versionself
Behebungen (8)
- MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)
Avoid to run untrusted code on affected systems
- MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)
Avoid to run untrusted code on affected systems
- MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Avoid to run untrusted code on affected systems
- MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Avoid to run untrusted code on affected systems
- Kein Fix geplantSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)
Currently no remediation is planned
- Kein Fix geplantSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)
Currently no remediation is planned
- Kein Fix geplantSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Currently no remediation is planned
- Kein Fix geplantSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Currently no remediation is planned
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan