High ICSA-21-194-13 1 CVE

Siemens SINAMICS PERFECT HARMONY GH180 (Update A)

Published Jul 13, 2021 · Updated Sep 14, 2021 · Revision 2

Vendor: Siemens Product: SINAMICS PERFECT HARMONY GH180 Drives Product: SINAMICS PERFECT HARMONY model 6SR4 Product: SINAMICS PERFECT HARMONY model 6SR5

Summary

Successful exploitation of this vulnerability could result in arbitrary code execution and unauthorized access to sensitive data.

Vulnerabilities 1

Critical 9.8

CVE-2020-15782

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open C…

Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) SIMATIC S7-1500 Software Controller ICS / OT

May 28, 2021

Revision history

2021-09-14 #2
ICSA-21-194-13 Siemens SINAMICS PERFECT HARMONY GH180 (Update A)
2021-07-13 #1
ICSA-21-194-13 Siemens SINAMICS PERFECT HARMONY GH180

References

ICS Advisory ICSA-21-194-13 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-194-13
Recommended Practices
https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B