SSA-968170: Remote Code Execution Vulnerability in SIMATIC STEP 7 V5.x and Derived Products
SIMATIC STEP 7 and PCS 7 contain a database management system that could allow remote users to use embedded functions of the database (local or in a network share) that have impact on the server. An attacker with network access to the server network could leverage these embedded functions to run code in the database management system's server (where STEP 7 or PCS 7 are running). Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-25910US | high8.8 | — | ||
A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All versions < V5.7 SP2 HF1), SIMAT… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-968170: Remote Code Execution Vulnerability in SIMATIC STEP 7 V5.x and Derived Products - CSAF Versionself
- SSA-968170: Remote Code Execution Vulnerability in SIMATIC STEP 7 V5.x and Derived Products - HTML Versionself
- SSA-968170: Remote Code Execution Vulnerability in SIMATIC STEP 7 V5.x and Derived Products - PDF Versionself
- SSA-968170: Remote Code Execution Vulnerability in SIMATIC STEP 7 V5.x and Derived Products - TXT Versionself
Behebungen (9)
- MitigationSIMATIC PCS 7
If multiple Engineering Systems are in use ensure that the user accounts in use are restricted to the minimum required operating rights
- MitigationSIMATIC S7-PM
If multiple Engineering Systems are in use ensure that the user accounts in use are restricted to the minimum required operating rights
- MitigationSIMATIC STEP 7 V5
If multiple Engineering Systems are in use ensure that the user accounts in use are restricted to the minimum required operating rights
- BehobenSIMATIC PCS 7
Update to V9.1 SP2 UC04 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812242/ - BehobenSIMATIC S7-PM
Update to V5.7 SP2 HF1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109827552/ - BehobenSIMATIC STEP 7 V5
Update to V5.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794088/ - WorkaroundSIMATIC PCS 7
If only one Engineering System is in use, consider changing to "Single terminal system" mode in the "Configure SIMATIC Workspace/Workstation" application, under the "Workstation Configuration" tab. Restart the computer. More details can be found in the following FAQ: https://support.industry.siemens.com/cs/ww/en/view/109821340/
- WorkaroundSIMATIC S7-PM
If only one Engineering System is in use, consider changing to "Single terminal system" mode in the "Configure SIMATIC Workspace/Workstation" application, under the "Workstation Configuration" tab. Restart the computer. More details can be found in the following FAQ: https://support.industry.siemens.com/cs/ww/en/view/109821340/
- WorkaroundSIMATIC STEP 7 V5
If only one Engineering System is in use, consider changing to "Single terminal system" mode in the "Configure SIMATIC Workspace/Workstation" application, under the "Workstation Configuration" tab. Restart the computer. More details can be found in the following FAQ: https://support.industry.siemens.com/cs/ww/en/view/109821340/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan