SSA-384224: Denial of Service Vulnerability in SIMATIC HMI Panels
Several SIMATIC HMI Panels are affected by a vulnerability that could allow an attacker to cause a permanent denial of service condition (requiring a device reboot) by sending specially crafted TCP packets. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-40227US | high7.5 | — | ||
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V17 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V17 Update 4)… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (20)
- BehobenSIMATIC HMI Comfort Panels (incl. SIPLUS variants)
Update to V17 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - BehobenSIMATIC HMI KTP Mobile Panels
Update to V17 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - BehobenSIMATIC HMI KTP1200 Basic (6AV2123-2MB03-0AX0)
Update to V17 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - BehobenSIMATIC HMI KTP400 Basic (6AV2123-2DB03-0AX0)
Update to V17 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - BehobenSIMATIC HMI KTP700 Basic (6AV2123-2GB03-0AX0)
Update to V17 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - BehobenSIMATIC HMI KTP900 Basic (6AV2123-2JB03-0AX0)
Update to V17 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - BehobenSIPLUS HMI KTP1200 BASIC (6AG1123-2MB03-2AX0)
Update to V17 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - BehobenSIPLUS HMI KTP400 BASIC (6AG1123-2DB03-2AX0)
Update to V17 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - BehobenSIPLUS HMI KTP700 BASIC (6AG1123-2GB03-2AX0)
Update to V17 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - BehobenSIPLUS HMI KTP900 BASIC (6AG1123-2JB03-2AX0)
Update to V17 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - WorkaroundSIMATIC HMI Comfort Panels (incl. SIPLUS variants)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIMATIC HMI KTP Mobile Panels
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIMATIC HMI KTP1200 Basic (6AV2123-2MB03-0AX0)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIMATIC HMI KTP400 Basic (6AV2123-2DB03-0AX0)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIMATIC HMI KTP700 Basic (6AV2123-2GB03-0AX0)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIMATIC HMI KTP900 Basic (6AV2123-2JB03-0AX0)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIPLUS HMI KTP1200 BASIC (6AG1123-2MB03-2AX0)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIPLUS HMI KTP400 BASIC (6AG1123-2DB03-2AX0)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIPLUS HMI KTP700 BASIC (6AG1123-2GB03-2AX0)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
- WorkaroundSIPLUS HMI KTP900 BASIC (6AG1123-2JB03-2AX0)
Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan