Siemens SINAMICS (Update C)

Vulnerabilities 1

• High 7.5
  CVE-2019-6568

  The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attac…

  Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) SIMATIC S7-1500 Software Controller ICS / OT
  Apr 17, 2019

Revision history

1. 2020-05-12 #4

   Added solution for SINAMICS SL150 V4.8

2. 2019-12-10 #3

   Added solution for SINAMICS SM120 V4.7 and SINAMICS SM120 V4.8

3. 2019-11-12 #2

   Added solution for SINAMICS SL150 V4.7

4. 2019-08-13 #1

   Publication Date

References

• SSA-530931: Denial-of-Service in Webserver of Industrial Products - HTML Version
  https://cert-portal.siemens.com/productcert/html/ssa-530931.html
• ICS Advisory ICSA-19-227-04 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-19-227-04
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B