SSA-363107: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode
A vulnerability was found in SIMATIC WinCC that could allow authenticated attackers to escape the Kiosk Mode. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-24287US | medium4.6OT erhöht | — | ||
A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1 UC01), SIMA… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-363107: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode - CSAF Versionself
- SSA-363107: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode - HTML Versionself
- SSA-363107: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode - PDF Versionself
- SSA-363107: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode - TXT Versionself
Behebungen (16)
- MitigationSIMATIC PCS 7 V8.2
At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system
- MitigationSIMATIC PCS 7 V9.0
At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system
- MitigationSIMATIC PCS 7 V9.1
At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system
- MitigationSIMATIC WinCC Runtime Professional V16 and earlier
At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system
- MitigationSIMATIC WinCC Runtime Professional V17
At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system
- MitigationSIMATIC WinCC V7.3
At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system
- MitigationSIMATIC WinCC V7.4
At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system
- MitigationSIMATIC WinCC V7.5
At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system
- Kein Fix geplantSIMATIC PCS 7 V8.2
Currently no fix is planned
- Kein Fix geplantSIMATIC WinCC Runtime Professional V16 and earlier
Currently no fix is planned
- Kein Fix geplantSIMATIC WinCC V7.3
Currently no fix is planned
- BehobenSIMATIC PCS 7 V9.0
Update SIMATIC WinCC to V7.4 SP 1 Update 21 or later version
- BehobenSIMATIC PCS 7 V9.1
Update to V9.1 SP1 UC01 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805072/ - BehobenSIMATIC WinCC Runtime Professional V17
Update to V17 Upd4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800913/ - BehobenSIMATIC WinCC V7.4
Update to V7.4 SP1 Update 21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109806846/ - BehobenSIMATIC WinCC V7.5
Update to V7.5 SP2 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793460/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan