Skip to content
OpenAdvisories
Medium ICSA-18-226-02 1 CVE

Siemens OpenSSL Vulnerability in Industrial Products (Update E)

Published Aug 7, 2018 · Updated Sep 13, 2022 · Revision 8

Vendor: Siemens Product: MindConnect IoT2040 Product: MindConnect Nano (IPC227D) Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) Product: SIMATIC HMI WinCC Flexible Product: SIMATIC IPC DiagBase Product: SIMATIC IPC DiagMonitor Product: SIMATIC S7-1200 CPU family (incl. SIPLUS variants) Product: SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) Product: SIMATIC S7-1500 Software Controller Product: SIMATIC STEP 7 (TIA Portal) V13 Product: SIMATIC STEP 7 (TIA Portal) V14 Product: SIMATIC STEP 7 (TIA Portal) V15 Product: SIMATIC WinCC (TIA Portal) V13 Product: SIMATIC WinCC (TIA Portal) V14 Product: SIMATIC WinCC (TIA Portal) V15 Product: SIMATIC WinCC OA V3.14 Product: SIMATIC WinCC OA V3.15 Product: SIMATIC WinCC OA V3.16 Product: SINUMERIK Integrate Access MyMachine service engineer client as part of Sinumerik Integrate Product suite Product: SINUMERIK Integrate Operate Client as part of Sinumerik Integrate Product suite

Summary

Several Siemens industrial products are affected by a vulnerability in
OpenSSL, that could result in data being sent out unencrypted by the
SSL/TLS record layer. Siemens has released updates for the affected
products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #8

    Added fix for SIMATIC STEP 7 (TIA Portal) V14; updated fix information for SIMATIC IPC DiagBase and DiagMonitor

  2. #7

    SIPLUS devices now explicitly mentioned in the list of affected products

  3. #6

    Added update for SIMATIC IPC DiagBase and SIMATIC WinCC (TIA Portal) V14

  4. #5

    Added update for SIMATIC S7-1500 Software Controller, SIMATIC ET 200SP Open Controller CPU 1515SP PC

  5. #4

    Added update for SIMATIC HMI WinCC Flexible, SIMATIC IPC DiagMonitor

  6. #3

    Added update for SIMATIC S7-1200 CPU, SIMATIC STEP 7 (TIA Portal) V13, SIMATIC WinCC (TIA Portal) V13

  7. #2

    Added WinCC OA patches, removed OC1 variant indicator as F is also affected

  8. #1

    Publication Date

References