SSA-711829: Denial of Service Vulnerability in TIA Administrator
In conjunction with the installation of the affected products listed in the table below, a vulnerability in TIA Administrator occurs that could allow an unauthenticated attacker to perform a denial of service attack. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-27194US | high7.5 | — | ||
A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affec… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- MitigationSIMATIC PCS neo (Administration Console)
Apply measures described in "Industrial Security in SIMATIC PCS neo": https://support.industry.siemens.com/cs/ww/en/view/109771524/
- MitigationSINETPLAN
Restrict access to port 8888/tcp to localhost (default)
- MitigationTIA Portal
Restrict access to port 8888/tcp to localhost (default)
- BehobenSIMATIC PCS neo (Administration Console)
Update to V3.1 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807752/ - BehobenSINETPLAN
Update TIA Administrator to V1.0 SP7 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/ - BehobenTIA Portal
Update TIA Administrator to V1.0 SP7 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan