SSA-753746: Denial of Service Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products
Two null point dereference vulnerabilities affect multiple SIMATIC software products. These could allow an attacker to cause a persistent denial of service condition in the RPC Server of these products. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-48364US | medium6.5 | — | ||
A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2… | ||||
| CVE-2023-48363US | medium6.5 | — | ||
A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (36)
- Kein Fix geplantSIMATIC WinCC V7.4
Currently no fix is planned
- Kein Fix geplantSIMATIC WinCC V7.4
Currently no fix is planned
- BehobenOpenPCS 7 V9.1
See remediation for SIMATIC PCS 7 V9.1
- BehobenOpenPCS 7 V9.1
See remediation for SIMATIC PCS 7 V9.1
- BehobenSIMATIC BATCH V9.1
See remediation for SIMATIC PCS 7 V9.1
- BehobenSIMATIC BATCH V9.1
See remediation for SIMATIC PCS 7 V9.1
- BehobenSIMATIC PCS 7 V9.1
Update to V9.1 SP2 UC05 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812242/ - BehobenSIMATIC PCS 7 V9.1
Update to V9.1 SP2 UC05 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812242/ - BehobenSIMATIC Route Control V9.1
See remediation for SIMATIC PCS 7 V9.1
- BehobenSIMATIC Route Control V9.1
See remediation for SIMATIC PCS 7 V9.1
- BehobenSIMATIC WinCC Runtime Professional V18
Update to V18 Update 4 or later version
- BehobenSIMATIC WinCC Runtime Professional V18
Update to V18 Update 4 or later version
- BehobenSIMATIC WinCC Runtime Professional V19
Update to V19 Update 2 or later version
- BehobenSIMATIC WinCC Runtime Professional V19
Update to V19 Update 2 or later version
- BehobenSIMATIC WinCC V7.5
Update to V7.5 SP2 Update 15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793460/ - BehobenSIMATIC WinCC V7.5
Update to V7.5 SP2 Update 15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793460/ - BehobenSIMATIC WinCC V8.0
Update to V8.0 Update 4 or later version
- BehobenSIMATIC WinCC V8.0
Update to V8.0 Update 4 or later version
- WorkaroundOpenPCS 7 V9.1
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundOpenPCS 7 V9.1
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundSIMATIC BATCH V9.1
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundSIMATIC BATCH V9.1
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundSIMATIC PCS 7 V9.1
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundSIMATIC PCS 7 V9.1
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundSIMATIC Route Control V9.1
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundSIMATIC Route Control V9.1
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundSIMATIC WinCC Runtime Professional V18
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundSIMATIC WinCC Runtime Professional V18
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundSIMATIC WinCC Runtime Professional V19
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundSIMATIC WinCC Runtime Professional V19
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundSIMATIC WinCC V7.4
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundSIMATIC WinCC V7.4
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundSIMATIC WinCC V7.5
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundSIMATIC WinCC V7.5
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundSIMATIC WinCC V8.0
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
- WorkaroundSIMATIC WinCC V8.0
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC and SIMATIC PCS 7). Enabling “Encrypted Communication” completely mitigates the vulnerability
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan