SSA-672373: Vulnerabilities in CP 1543-1 before V2.0.28
Advisory ansehen veröffentlicht 2016-11-18
SIMATIC CP 1543-1 devices before V2.0.28 contain two vulnerabilities that could allow authorized users to escalate their privileges on the CP or create a denial of service condition. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2016-8562US | high7.5OT kritisch | KEV | ||
A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under special conditions it was possible to write… | ||||
| CVE-2016-8561US | medium6.6 | — | ||
A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Users with elevated privileges to TIA-Portal and p… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (4)
- BehobenSIMATIC CP 1543-1
Update to V2.0.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808678/ - BehobenSIMATIC CP 1543-1
Update to V2.0.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808678/ - BehobenSIPLUS NET CP 1543-1
Update to V2.0.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808678/ - BehobenSIPLUS NET CP 1543-1
Update to V2.0.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808678/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan