CVE-2018-4832

mediumPriorität · verfolgen · 31EPSS 0.024 · 84. PerzentilDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

2.42% (84th) EPSS

CVSS 4.3 · medium

Is it mine?

157 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd1), SIMATIC BATCH V7.1 and earlier (All versions), SIMATIC BATCH V8.0 (All versions < V8.0 SP1 Upd21), SIMATIC BATCH V8.1 (All versions < V8.1 SP1 Upd16), SIMATIC BATCH V8.2 (All versions < V8.2 Upd10), SIMATIC BATCH V9.0 (All versions < V9.0 SP1), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions < 15 SP1), SIMATIC PCS 7 V7.1 and earlier (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP1), SIMATIC Route Control V7.1 and earlier (All versions), SIMATIC Route Control V8.0 (All versions), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions < V9.0 Upd1), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2 Upd2), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1 Upd5), SIMATIC WinCC V7.2 and earlier (All versions < WinCC 7.2 Upd 15), SIMATIC WinCC V7.3 (All versions < WinCC 7.3 Upd 16), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 4), SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). Specially crafted messages sent to the RPC service of the affected products could cause a Denial-of-Service condition on the remote and local communication functionality of the affected products. A reboot of the system is required to recover the remote and local communication functionality. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenOpenPCS 7 V8.1siemens_psirt
Update to OpenPCS 7 V8.1 Upd 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109761055
BehobenOpenPCS 7 V8.2siemens_psirt
See remediation for PCS 7 V8.2
BehobenOpenPCS 7 V9.0siemens_psirt
See remediation for PCS 7 V9.0
BehobenSIMATIC BATCH V8.0siemens_psirt
Update to SIMATIC BATCH V8.0 SP1 Upd21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109756847
BehobenSIMATIC BATCH V8.1siemens_psirt
Update to SIMATIC BATCH V8.1 SP1 Upd16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109756846
BehobenSIMATIC BATCH V8.2siemens_psirt
Update to SIMATIC BATCH V8.2 Upd10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757796
BehobenSIMATIC BATCH V9.0siemens_psirt
See remediation for PCS 7 V9.0
BehobenSIMATIC NET PC Software V14siemens_psirt
Update to V14 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807351/
BehobenSIMATIC NET PC Software V15siemens_psirt
Update to V15 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109762690
BehobenSIMATIC PCS 7 V8.2siemens_psirt
Update to V8.2 SP1 or later version
BehobenSIMATIC PCS 7 V9.0siemens_psirt
Update to V9.0 SP1 (Includes Open PCS 7 V9.0 Upd1, SIMATIC Batch V9.0 SP1, SIMATIC Route Control V9.0 Upd1 and SIMATIC WinCC V7.4 SP1 Upd4).
BehobenSIMATIC Route Control V8.2siemens_psirt
See remediation for PCS 7 V8.2
BehobenSIMATIC Route Control V9.0siemens_psirt
See remediation for PCS 7 V9.0
BehobenSIMATIC WinCC Runtime Professional V13siemens_psirt
Update to V13 SP2 Upd2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759753
BehobenSIMATIC WinCC Runtime Professional V14siemens_psirt
Update to V14 SP1 Upd5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109747394
BehobenSIMATIC WinCC V7.2 and earliersiemens_psirt
Update to WinCC 7.2 Upd 15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109762887
BehobenSIMATIC WinCC V7.3siemens_psirt
Update to WinCC 7.3 Upd 16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109756123
BehobenSIMATIC WinCC V7.4siemens_psirt
Update to V7.4 SP1 Upd 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109753031
BehobenOpenPCS 7 V8.1cisa_csaf_ot
Update to OpenPCS 7 V8.1 Upd 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109761055
BehobenOpenPCS 7 V8.2cisa_csaf_ot
See remediation for PCS 7 V8.2
BehobenOpenPCS 7 V9.0cisa_csaf_ot
See remediation for PCS 7 V9.0
BehobenSIMATIC BATCH V8.0cisa_csaf_ot
Update to SIMATIC BATCH V8.0 SP1 Upd21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109756847
BehobenSIMATIC BATCH V8.1cisa_csaf_ot
Update to SIMATIC BATCH V8.1 SP1 Upd16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109756846
BehobenSIMATIC BATCH V8.2cisa_csaf_ot
Update to SIMATIC BATCH V8.2 Upd10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757796
BehobenSIMATIC BATCH V9.0cisa_csaf_ot
See remediation for PCS 7 V9.0
BehobenSIMATIC NET PC Software V14cisa_csaf_ot
Update to V14 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807351/
BehobenSIMATIC NET PC Software V15cisa_csaf_ot
Update to V15 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109762690
BehobenSIMATIC PCS 7 V8.2cisa_csaf_ot
Update to V8.2 SP1 or later version
BehobenSIMATIC PCS 7 V9.0cisa_csaf_ot
Update to V9.0 SP1 (Includes Open PCS 7 V9.0 Upd1, SIMATIC Batch V9.0 SP1, SIMATIC Route Control V9.0 Upd1 and SIMATIC WinCC V7.4 SP1 Upd4).
BehobenSIMATIC Route Control V8.2cisa_csaf_ot
See remediation for PCS 7 V8.2
BehobenSIMATIC Route Control V9.0cisa_csaf_ot
See remediation for PCS 7 V9.0
BehobenSIMATIC WinCC Runtime Professional V13cisa_csaf_ot
Update to V13 SP2 Upd2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759753
BehobenSIMATIC WinCC Runtime Professional V14cisa_csaf_ot
Update to V14 SP1 Upd5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109747394
BehobenSIMATIC WinCC V7.2 and earliercisa_csaf_ot
Update to WinCC 7.2 Upd 15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109762887
BehobenSIMATIC WinCC V7.3cisa_csaf_ot
Update to WinCC 7.3 Upd 16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109756123
BehobenSIMATIC WinCC V7.4cisa_csaf_ot
Update to V7.4 SP1 Upd 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109753031
BehobenSPPA-T3000 Application Servercisa_csaf_ot
Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.
MitigationOpenPCS 7 V7.1 and earliersiemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V8.0siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V8.1siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V8.2siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V9.0siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V7.1 and earliersiemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V8.0siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V8.1siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V8.2siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V9.0siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC NET PC Software V14siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC NET PC Software V15siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V7.1 and earliersiemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V8.0siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V8.1siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V8.2siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V9.0siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V7.1 and earliersiemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V8.0siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V8.1siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V8.2siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V9.0siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC Runtime Professional V13siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC Runtime Professional V14siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC V7.2 and earliersiemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC V7.3siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC V7.4siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V7.1 and earliercisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V8.0cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V8.1cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V8.2cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V9.0cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V7.1 and earliercisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V8.0cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V8.1cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V8.2cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V9.0cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC NET PC Software V14cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC NET PC Software V15cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V7.1 and earliercisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V8.0cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V8.1cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V8.2cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V9.0cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V7.1 and earliercisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V8.0cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V8.1cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V8.2cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V9.0cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC Runtime Professional V13cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC Runtime Professional V14cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC V7.2 and earliercisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC V7.3cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC V7.4cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSPPA-T3000 Application Servercisa_csaf_ot
External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed
Kein Fix geplantOpenPCS 7 V7.1 and earliersiemens_psirt
Currently no fix is planned
Kein Fix geplantOpenPCS 7 V8.0siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC BATCH V7.1 and earliersiemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC PCS 7 V7.1 and earliersiemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC PCS 7 V8.0siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC PCS 7 V8.1siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC Route Control V7.1 and earliersiemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC Route Control V8.0siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC Route Control V8.1siemens_psirt
Currently no fix is planned
Kein Fix geplantOpenPCS 7 V7.1 and earliercisa_csaf_ot
Currently no fix is planned
Kein Fix geplantOpenPCS 7 V8.0cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMATIC BATCH V7.1 and earliercisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMATIC PCS 7 V7.1 and earliercisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMATIC PCS 7 V8.0cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMATIC PCS 7 V8.1cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMATIC Route Control V7.1 and earliercisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMATIC Route Control V8.0cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMATIC Route Control V8.1cisa_csaf_ot
Currently no fix is planned

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.3–7.5

v2.04.3mediumAV:N/AC:M/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USAusnutzbarkeit 8.6 · Auswirkung 2.9

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · CISA US

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-20USprimärCWE-20USCWE-20USCWE-20US

betroffene Produkte (157)

Betroffene Produkte und Versionsbereiche.

OpenPCS 7 V7.1 and earlieralle Versionencisa_csaf_otUS
OpenPCS 7 V8.0alle Versionencisa_csaf_otUS
OpenPCS 7 V8.1alle Versionencisa_csaf_otUS
OpenPCS 7 V8.2alle Versionencisa_csaf_otUS
OpenPCS 7 V9.0alle Versionencisa_csaf_otUS
SIMATIC BATCH V7.1 and earlieralle Versionencisa_csaf_otUS
SIMATIC BATCH V8.0alle Versionencisa_csaf_otUS
SIMATIC BATCH V8.1alle Versionencisa_csaf_otUS
SIMATIC BATCH V8.2alle Versionencisa_csaf_otUS
SIMATIC BATCH V9.0alle Versionencisa_csaf_otUS
SIMATIC NET PC Software V14alle Versionencisa_csaf_otUS
SIMATIC NET PC Software V15alle Versionencisa_csaf_otUS
SIMATIC PCS 7 V7.1 and earlieralle Versionencisa_csaf_otUS
SIMATIC PCS 7 V8.0alle Versionencisa_csaf_otUS
SIMATIC PCS 7 V8.1alle Versionencisa_csaf_otUS
SIMATIC PCS 7 V8.2alle Versionencisa_csaf_otUS
SIMATIC PCS 7 V9.0alle Versionencisa_csaf_otUS
SIMATIC Route Control V7.1 and earlieralle Versionencisa_csaf_otUS
SIMATIC Route Control V8.0alle Versionencisa_csaf_otUS
SIMATIC Route Control V8.1alle Versionencisa_csaf_otUS

20 von 157 angezeigt

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

SSA-348629SSA-348629: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC Software2018-03-27csaf · siemens_psirtDE
A Denial-of-Service vulnerability has been identified in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC-Software. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
ICSA-18-088-03Siemens SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional, and SIMATIC NET PC Software (Update G)2018-03-27icsa · cisa_csaf_otUS
A Denial-of-Service vulnerability has been identified in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC-Software. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
ICSA-19-351-02Siemens SPPA-T3000 (Update A)2019-12-10icsa · cisa_csaf_otUS
SPPA-T3000 Application Server and MS3000 Migration Server are affected by multiple vulnerabilities. Some of the vulnerabilities can allow an attacker to execute arbitrary code on the server. Exploitation of the vulnerabilities described in this advisory requires access to either Application- or Automation Highway. Both highways should not be exposed if the environment has been set up according to the recommended system configuration in the SPPA-T3000 security manual. In this case Siemens Energy considers the environmental score as CR:L/IR:L/AR:H/MAV:A for vulnerabilities related to the Application Server and CR:L/IR:L/AR:M/MAV:A for vulnerabilities related to the Migration Server. Siemens Energy provides a service pack to fix vulnerabilities on the Application Server and recommends configurations to mitigate the vulnerabilities in the Migration Server. Detailed information will be available for SPPA-T3000 customers in the Siemens Energy Customer Portal (https://cep.siemens-energy.com/).

auch bekannt als (6)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

veröffentlicht 2018-04-24geändert 2026-06-17

verwandt (25,193)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-88771US	critical9.8OT kritisch	82.2% (100th)	KEV	2026-09-27
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS,…
CVE-2026-93952US	—OT kritisch	1.38% (72nd)	KEV	2026-09-22
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successf…
CVE-2026-12569US	critical9.8OT kritisch	46.0% (99th)	KEV	2026-06-18
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of u…
CVE-2026-34910US	—OT kritisch	90.0% (100th)	KEV	2026-05-22
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
CVE-2026-6973US	—OT kritisch	34.5% (98th)	KEV	2026-05-07
An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code…

+25188 weitere

Referenzen (11)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan