SSA-568428: Weak Key Protection Vulnerability in SINUMERIK ONE and SINUMERIK MC
SINUMERIK ONE and SINUMERIK MC products are affected by a weak key protection vulnerability in the integrated S7-1500 CPU. The weak key protection vulnerability in the integrated S7-1500 CPU is documented in more detail in SSA-568427 [1]. Siemens has released updates for the affected products and recommends to update to the latest versions. [1] https://cert-portal.siemens.com/productcert/html/ssa-568427.html
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-38465US | high7.8 | — | ||
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- MitigationSINUMERIK MC
Expose the communication between the S7-1500 CPU and the HMI of the affected products only to trusted network environments
- MitigationSINUMERIK ONE
Expose the communication between the S7-1500 CPU and the HMI of the affected products only to trusted network environments
- BehobenSINUMERIK MC
Update to V6.21 or later version SINUMERIK software can be obtained from your local Siemens account manager.
- BehobenSINUMERIK ONE
Update to V6.21 or later version SINUMERIK software can be obtained from your local Siemens account manager.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan