High ICSA-18-060-01 3 CVEs

ICSA-18-060-01_Siemens SIMATIC, SIMOTION, and SINUMERIK (Update A)

Published Mar 1, 2018 · Updated Apr 19, 2018 · Revision 2

Vendor: Siemens Product: SIMATIC Field PG M5 Product: SIMATIC Field-PG M3 Product: SIMATIC Field-PG M4 Product: SIMATIC HMI IPC677C Product: SIMATIC IPC427D Product: SIMATIC IPC427E Product: SIMATIC IPC477D Product: SIMATIC IPC477D PRO Product: SIMATIC IPC477E Product: SIMATIC IPC547D Product: SIMATIC IPC547E Product: SIMATIC IPC547G Product: SIMATIC IPC627C Product: SIMATIC IPC627D Product: SIMATIC IPC647C Product: SIMATIC IPC647D Product: SIMATIC IPC677D Product: SIMATIC IPC827C Product: SIMATIC IPC827D Product: SIMATIC IPC847C Product: SIMATIC IPC847D Product: SIMATIC ITP1000 Product: SIMOTION P320-4S Product: SINUMERIK PCU50.5-C WIN7 Product: SINUMERIK PCU50.5-C WINXP Product: SINUMERIK PCU50.5-P WIN7 Product: SINUMERIK PCU50.5-P WINXP

Summary

Siemens ProductCERT reported the vulnerabilities to NCCIC.

Vulnerabilities 3

Unscored —

CVE-2017-5705

Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attack…

Intel Manageability Engine

Nov 21, 2017
Unscored —

CVE-2017-5706

Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to …

Intel Server Platform Services

Nov 21, 2017
Unscored —

CVE-2017-5707

Multiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker with local access to …

Intel Trusted Execution Engine

Nov 21, 2017

Revision history

2018-04-19 #2
ICSA-18-060-01 Siemens SIMATIC, SIMOTION, and SINUMERIK (Update A)
2018-03-01 #1
ICSA-18-060-01 Siemens SIMATIC, SIMOTION, and SINUMERIK

References

ICS Advisory ICSA-18-060-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-060-01