SSA-534763: Special Register Buffer Data Sampling (SRBDS) aka Crosstalk in Industrial Products
Security researchers published information on a vulnerability known as Crosstalk (INTEL-SA-00320). This vulnerability affects modern Intel processors to a varying degree. Several Siemens Industrial Products contain processors that are affected by the vulnerability. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-0543US | medium5.5 | — | ||
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-534763: Special Register Buffer Data Sampling (SRBDS) aka Crosstalk in Industrial Products - CSAF Versionself
- SSA-534763: Special Register Buffer Data Sampling (SRBDS) aka Crosstalk in Industrial Products - PDF Versionself
- SSA-534763: Special Register Buffer Data Sampling (SRBDS) aka Crosstalk in Industrial Products - TXT Versionself
Behebungen (50)
- MitigationSIMATIC Field PG M4
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC Field PG M5
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC Field PG M6
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC3000 SMART V2
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC347E
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC427D (incl. SIPLUS variants)
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC427E (incl. SIPLUS variants)
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC477D
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC477E
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC477E Pro
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC527G
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC547E
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC547G
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC627D
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC627E
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC647D
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC647E
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC677D
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC677E
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC827D
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC847D
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC IPC847E
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMATIC ITP1000
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMOTION P320-4E
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- MitigationSIMOTION P320-4S
Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: https://www.siemens.com/industrialsecurity
- Kein Fix geplantSIMATIC Field PG M4
Currently no remediation is planned
- Kein Fix geplantSIMATIC IPC347E
Currently no remediation is planned
- Kein Fix geplantSIMATIC IPC427D (incl. SIPLUS variants)
Currently no remediation is planned
- Kein Fix geplantSIMATIC IPC477D
Currently no remediation is planned
- Kein Fix geplantSIMATIC IPC547E
Currently no remediation is planned
- Kein Fix geplantSIMATIC IPC627D
Currently no remediation is planned
- Kein Fix geplantSIMATIC IPC647D
Currently no remediation is planned
- Kein Fix geplantSIMATIC IPC677D
Currently no remediation is planned
- Kein Fix geplantSIMATIC IPC827D
Currently no remediation is planned
- Kein Fix geplantSIMATIC IPC847D
Currently no remediation is planned
- Kein Fix geplantSIMOTION P320-4E
Currently no remediation is planned
- Kein Fix geplantSIMOTION P320-4S
Currently no remediation is planned
- BehobenSIMATIC Field PG M5
Update BIOS to V22.01.08
https://support.industry.siemens.com/cs/ww/en/view/109763408 - BehobenSIMATIC Field PG M6
Update BIOS to V26.01.07
https://support.industry.siemens.com/cs/ww/en/view/109763408 - BehobenSIMATIC IPC3000 SMART V2
Update BIOS to V1.B or later version
https://support.industry.siemens.com/cs/cn/en/view/109763408/ - BehobenSIMATIC IPC427E (incl. SIPLUS variants)
Update BIOS to V21.01.14
https://support.industry.siemens.com/cs/ww/en/view/109763408 - BehobenSIMATIC IPC477E
Update BIOS to V21.01.14
https://support.industry.siemens.com/cs/ww/en/view/109763408 - BehobenSIMATIC IPC477E Pro
Update BIOS to V21.01.14
https://support.industry.siemens.com/cs/ww/en/view/109763408 - BehobenSIMATIC IPC527G
Update BIOS to V1.4.0
https://support.industry.siemens.com/cs/ww/en/view/109763408 - BehobenSIMATIC IPC547G
Update BIOS to R1.28.0
https://support.industry.siemens.com/cs/ww/en/view/109763408 - BehobenSIMATIC IPC627E
Update BIOS to V25.02.06
https://support.industry.siemens.com/cs/ww/en/view/109763408 - BehobenSIMATIC IPC647E
Update BIOS to V25.02.06
https://support.industry.siemens.com/cs/ww/en/view/109763408 - BehobenSIMATIC IPC677E
Update BIOS to V25.02.06
https://support.industry.siemens.com/cs/ww/en/view/109763408 - BehobenSIMATIC IPC847E
Update BIOS to V25.02.06
https://support.industry.siemens.com/cs/ww/en/view/109763408 - BehobenSIMATIC ITP1000
Update BIOS to V23.01.08
https://support.industry.siemens.com/cs/ww/en/view/109763408
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan