SSA-603476: Web Vulnerabilities in SIMATIC NET CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs
SIMATIC CP 343-1 Advanced/CP-443-1 Advanced devices and SIMATIC S7-300/S7-400 CPUs are affected by two vulnerabilities. One of the vulnerabilities could allow remote attackers to perform operations as an authenticated user under certain conditions. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2016-8673US | high8.8OT erhöht | — | ||
A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 443-1 Advanced (incl. SIPLUS NET variant) (All vers… | ||||
| CVE-2016-8672US | medium5.3 | — | ||
A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 443-1 Advanced (incl. SIPLUS NET variant) (All vers… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-603476: Web Vulnerabilities in SIMATIC NET CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs - CSAF Versionself
- SSA-603476: Web Vulnerabilities in SIMATIC NET CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs - HTML Versionself
- SSA-603476: Web Vulnerabilities in SIMATIC NET CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs - PDF Versionself
- SSA-603476: Web Vulnerabilities in SIMATIC NET CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs - TXT Versionself
Behebungen (16)
- Kein Fix geplantSIMATIC S7-400 PN/DP CPU family (incl. SIPLUS variants)
Currently no fix is planned
- Kein Fix geplantSIMATIC S7-400 PN/DP CPU family (incl. SIPLUS variants)
Currently no fix is planned
- BehobenSIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Update to V3.0.53 or any later version
https://support.industry.siemens.com/cs/ww/en/view/109742236 - BehobenSIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Update to V3.0.53 or any later version
https://support.industry.siemens.com/cs/ww/en/view/109742236 - BehobenSIMATIC CP 443-1 Advanced (incl. SIPLUS variants)
Update to V3.2.17 or any later version
https://support.industry.siemens.com/cs/ww/en/view/109745388 - BehobenSIMATIC CP 443-1 Advanced (incl. SIPLUS variants)
Update to V3.2.17 or any later version
https://support.industry.siemens.com/cs/ww/en/view/109745388 - BehobenSIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Update to V3.X.18 or later version
https://support.industry.siemens.com/cs/ww/en/ps/13752/dl - BehobenSIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Update to V3.X.18 or later version
https://support.industry.siemens.com/cs/ww/en/ps/13752/dl - WorkaroundSIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Deactivate the webserver if not required, and if deactivation is supported by the product
- WorkaroundSIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Deactivate the webserver if not required, and if deactivation is supported by the product
- WorkaroundSIMATIC CP 443-1 Advanced (incl. SIPLUS variants)
Deactivate the webserver if not required, and if deactivation is supported by the product
- WorkaroundSIMATIC CP 443-1 Advanced (incl. SIPLUS variants)
Deactivate the webserver if not required, and if deactivation is supported by the product
- WorkaroundSIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Deactivate the webserver if not required, and if deactivation is supported by the product
- WorkaroundSIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Deactivate the webserver if not required, and if deactivation is supported by the product
- WorkaroundSIMATIC S7-400 PN/DP CPU family (incl. SIPLUS variants)
Deactivate the webserver if not required, and if deactivation is supported by the product
- WorkaroundSIMATIC S7-400 PN/DP CPU family (incl. SIPLUS variants)
Deactivate the webserver if not required, and if deactivation is supported by the product
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan