Summary
A Denial-of-Service vulnerability found in SINUMERIK Controllers could allow an unauthenticated attacker with network access to the affected devices to cause system failure with total loss of availability.
Siemens has released an update for the SINUMERIK 828D and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions < V4.95). Affected d…
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-178380: Denial-of-Service Vulnerability in SINUMERIK Controllers - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-178380.txt
-
SSA-178380: Denial-of-Service Vulnerability in SINUMERIK Controllers - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-178380.pdf
-
ICS Advisory ICSA-21-287-04 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-287-04
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B