SSA-273799: Message Integrity Protection Bypass Vulnerability in SIMATIC Products
A message integrity protection bypass vulnerability has been identified in several SIMATIC products. The vulnerability could allow an attacker in a Man-in-the-Middle position to modify network traffic exchanged on port 102/tcp to PLCs of the SIMATIC S7-1200, SIMATIC S7-1500 and SIMATIC SoftwareController CPU families. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-10929US | medium5.9OT erhöht | — | ||
A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (10)
- Kein Fix geplantSIMATIC CP 1626
Currently no fix is planned
- Kein Fix geplantSIMATIC HMI Panel (incl. SIPLUS variants)
Currently no fix is planned
- Kein Fix geplantSIMATIC NET PC Software V15
Currently no fix is planned
- BehobenSIMATIC NET PC Software V14
Update to V14 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807351/ - BehobenSIMATIC STEP 7 (TIA Portal)
Update to version V16
https://support.industry.siemens.com/cs/document/109772803/ - BehobenSIMATIC WinCC (TIA Portal)
Update to version V16
https://support.industry.siemens.com/cs/document/109772803/ - BehobenSIMATIC WinCC OA
Update to V3.16 P013 or later version
https://www.winccoa.com/downloads/category/versions-patches.html - BehobenSIMATIC WinCC Runtime Advanced
Update to version V16
https://support.industry.siemens.com/cs/document/109771219/ - BehobenSIMATIC WinCC Runtime Professional
Update to version V16
https://support.industry.siemens.com/cs/document/109771219/ - BehobenTIM 1531 IRC (incl. SIPLUS NET variants)
Update to V2.1
https://support.industry.siemens.com/cs/document/109774204/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan