SSA-348629

csafDEsiemens_psirt

SSA-348629: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC Software

Advisory ansehen veröffentlicht 2018-03-27

A Denial-of-Service vulnerability has been identified in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC-Software. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2018-4832UShigh7.5—
A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All vers…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (54)

  • MitigationOpenPCS 7 V7.1 and earlier

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationOpenPCS 7 V8.0

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationOpenPCS 7 V8.1

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationOpenPCS 7 V8.2

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationOpenPCS 7 V9.0

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC BATCH V7.1 and earlier

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC BATCH V8.0

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC BATCH V8.1

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC BATCH V8.2

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC BATCH V9.0

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC NET PC Software V14

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC NET PC Software V15

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC PCS 7 V7.1 and earlier

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC PCS 7 V8.0

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC PCS 7 V8.1

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC PCS 7 V8.2

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC PCS 7 V9.0

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC Route Control V7.1 and earlier

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC Route Control V8.0

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC Route Control V8.1

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC Route Control V8.2

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC Route Control V9.0

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC WinCC Runtime Professional V13

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC WinCC Runtime Professional V14

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC WinCC V7.2 and earlier

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC WinCC V7.3

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • MitigationSIMATIC WinCC V7.4

    Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.

  • Kein Fix geplantOpenPCS 7 V7.1 and earlier

    Currently no fix is planned

  • Kein Fix geplantOpenPCS 7 V8.0

    Currently no fix is planned

  • Kein Fix geplantSIMATIC BATCH V7.1 and earlier

    Currently no fix is planned

  • Kein Fix geplantSIMATIC PCS 7 V7.1 and earlier

    Currently no fix is planned

  • Kein Fix geplantSIMATIC PCS 7 V8.0

    Currently no fix is planned

  • Kein Fix geplantSIMATIC PCS 7 V8.1

    Currently no fix is planned

  • Kein Fix geplantSIMATIC Route Control V7.1 and earlier

    Currently no fix is planned

  • Kein Fix geplantSIMATIC Route Control V8.0

    Currently no fix is planned

  • Kein Fix geplantSIMATIC Route Control V8.1

    Currently no fix is planned

  • BehobenOpenPCS 7 V8.1

    Update to OpenPCS 7 V8.1 Upd 5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109761055
  • BehobenOpenPCS 7 V8.2

    See remediation for PCS 7 V8.2

  • BehobenOpenPCS 7 V9.0

    See remediation for PCS 7 V9.0

  • BehobenSIMATIC BATCH V8.0

    Update to SIMATIC BATCH V8.0 SP1 Upd21 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109756847
  • BehobenSIMATIC BATCH V8.1

    Update to SIMATIC BATCH V8.1 SP1 Upd16 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109756846
  • BehobenSIMATIC BATCH V8.2

    Update to SIMATIC BATCH V8.2 Upd10 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757796
  • BehobenSIMATIC BATCH V9.0

    See remediation for PCS 7 V9.0

  • BehobenSIMATIC NET PC Software V14

    Update to V14 SP1 Update 14 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109807351/
  • BehobenSIMATIC NET PC Software V15

    Update to V15 SP1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109762690
  • BehobenSIMATIC PCS 7 V8.2

    Update to V8.2 SP1 or later version

  • BehobenSIMATIC PCS 7 V9.0

    Update to V9.0 SP1 (Includes Open PCS 7 V9.0 Upd1, SIMATIC Batch V9.0 SP1, SIMATIC Route Control V9.0 Upd1 and SIMATIC WinCC V7.4 SP1 Upd4).

  • BehobenSIMATIC Route Control V8.2

    See remediation for PCS 7 V8.2

  • BehobenSIMATIC Route Control V9.0

    See remediation for PCS 7 V9.0

  • BehobenSIMATIC WinCC Runtime Professional V13

    Update to V13 SP2 Upd2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109759753
  • BehobenSIMATIC WinCC Runtime Professional V14

    Update to V14 SP1 Upd5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109747394
  • BehobenSIMATIC WinCC V7.2 and earlier

    Update to WinCC 7.2 Upd 15 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109762887
  • BehobenSIMATIC WinCC V7.3

    Update to WinCC 7.3 Upd 16 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109756123
  • BehobenSIMATIC WinCC V7.4

    Update to V7.4 SP1 Upd 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109753031
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan