SSA-825651: Deserialization Vulnerability in SIMATIC STEP 7 (TIA Portal) before V18 Update 2
Affected applications do not properly restrict the .NET BinaryFormatter when deserializing user-controllable input. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released a new version for SIMATIC STEP 7 (TIA Portal) V18 and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-45147US | — | — | ||
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC STEP 7 V17 (All versions), SIMATIC STEP 7 V18 (All versions <… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-825651: Deserialization Vulnerability in SIMATIC STEP 7 (TIA Portal) before V18 Update 2 - CSAF Versionself
- SSA-825651: Deserialization Vulnerability in SIMATIC STEP 7 (TIA Portal) before V18 Update 2 - HTML Versionself
- SSA-825651: Deserialization Vulnerability in SIMATIC STEP 7 (TIA Portal) before V18 Update 2 - PDF Versionself
- SSA-825651: Deserialization Vulnerability in SIMATIC STEP 7 (TIA Portal) before V18 Update 2 - TXT Versionself
Behebungen (8)
- MitigationSIMATIC PCS neo V4.0
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 V18
Avoid opening untrusted files from unknown sources in affected products
- Kein Fix geplantSIMATIC PCS neo V4.0
Currently no fix is planned
- Kein Fix geplantSIMATIC STEP 7 V16
Currently no fix is planned
- Kein Fix geplantSIMATIC STEP 7 V17
Currently no fix is planned
- BehobenSIMATIC STEP 7 V18
Update to V18 Update 2 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan