SSA-307392: Denial of Service in OPC UA in Industrial Products
A vulnerability has been identified in the OPC UA server of several industrial products. The vulnerability could cause a denial of service condition on the service or the device. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-6575US | high7.5 | — | ||
A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.7), SIMATI… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (38)
- MitigationSIMATIC CP 443-1 OPC UA
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC IPC DiagMonitor
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC NET PC Software V13
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC NET PC Software V14
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC NET PC Software V15
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC RF188C
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC RF600R family
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC S7-1500 Software Controller
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC WinCC OA
Deactivate the OPC UA Service if supported by the product
- MitigationSIMATIC WinCC Runtime Advanced
Deactivate the OPC UA Service if supported by the product
- MitigationSINEC NMS
Deactivate the OPC UA Service if supported by the product
- MitigationSINEMA Server
Deactivate the OPC UA Service if supported by the product
- MitigationSINUMERIK OPC UA Server
Deactivate the OPC UA Service if supported by the product
- MitigationTeleControl Server Basic
Deactivate the OPC UA Service if supported by the product
- Kein Fix geplantSIMATIC CP 443-1 OPC UA
Currently no fix is planned
- Kein Fix geplantSIMATIC NET PC Software V13
Currently no fix is planned
- Kein Fix geplantSIMATIC NET PC Software V15
Currently no fix is planned
- BehobenSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
Update to V2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759122 - BehobenSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Update to V15.1 Upd4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763890 - BehobenSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Update to V15.1 Upd4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763890 - BehobenSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Update to V15.1 Upd4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763890 - BehobenSIMATIC IPC DiagMonitor
Update to V5.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763202 - BehobenSIMATIC NET PC Software V14
Update to V14 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807351/ - BehobenSIMATIC RF188C
Update to V1.1.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109768507 - BehobenSIMATIC RF600R family
Update to V3.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109768501 - BehobenSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Update to V2.6.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/ - BehobenSIMATIC S7-1500 Software Controller
Update to V2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478528 - BehobenSIMATIC WinCC OA
Update to V3.15 P018 or later version
https://www.winccoa.com/downloads/category/versions- patches.html - BehobenSIMATIC WinCC Runtime Advanced
Update to V15.1 Upd 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763891 - BehobenSINEC NMS
Update to V1.0 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776939 - BehobenSINEMA Server
Update to V14 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109767382 - BehobenSINUMERIK OPC UA Server
Update to V2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746207 - BehobenTeleControl Server Basic
Update to V3.1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812231/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan