SSA-482956: Information Disclosure Vulnerability in SIMOTION before V5.5
SIMOTION contains an information disclosure vulnerability that could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-27465US | medium4.6 | — | ||
A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP (All versions >= V5.4… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-482956: Information Disclosure Vulnerability in SIMOTION before V5.5 - CSAF Versionself
- SSA-482956: Information Disclosure Vulnerability in SIMOTION before V5.5 - HTML Versionself
- SSA-482956: Information Disclosure Vulnerability in SIMOTION before V5.5 - PDF Versionself
- SSA-482956: Information Disclosure Vulnerability in SIMOTION before V5.5 - TXT Versionself
Behebungen (26)
- MitigationSIMOTION C240 (6AU1240-1AA00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION C240 PN (6AU1240-1AB00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D410-2 DP (6AU1410-2AA00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D425-2 DP (6AU1425-2AA00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D435-2 DP (6AU1435-2AA00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D435-2 DP/PN (6AU1435-2AD00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA1)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D455-2 DP/PN (6AU1455-2AD00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION P320-4 E (6AU1320-4DE65-3AF0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION P320-4 S (6AU1320-4DS66-3AG0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- Kein Fix geplantSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA0)
Currently no fix is planned
- Kein Fix geplantSIMOTION P320-4 E (6AU1320-4DE65-3AF0)
Currently no fix is planned
- Kein Fix geplantSIMOTION P320-4 S (6AU1320-4DS66-3AG0)
Currently no fix is planned
- BehobenSIMOTION C240 (6AU1240-1AA00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - BehobenSIMOTION C240 PN (6AU1240-1AB00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - BehobenSIMOTION D410-2 DP (6AU1410-2AA00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - BehobenSIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - BehobenSIMOTION D425-2 DP (6AU1425-2AA00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - BehobenSIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - BehobenSIMOTION D435-2 DP (6AU1435-2AA00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - BehobenSIMOTION D435-2 DP/PN (6AU1435-2AD00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - BehobenSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA1)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - BehobenSIMOTION D455-2 DP/PN (6AU1455-2AD00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan