Siemens SIMATIC S7-1500 (Update A)

Vulnerabilities 1

• Unscored —
  CVE-2019-19281

  A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All ver…

  Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) SIMATIC S7-1500 Software Controller SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) ICS / OT
  Mar 10, 2020

Revision history

1. 2020-03-10 #2

   Added update for SIMATIC ET 200SP Open Controller CPU 1515SP PC2

2. 2020-02-11 #1

   Publication Date

References

• SSA-750824: Denial-of-Service Vulnerability in Profinet Devices - HTML Version
  https://cert-portal.siemens.com/productcert/html/ssa-750824.html
• ICS Advisory ICSA-20-042-11 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-20-042-11
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B