Summary
Several SIMATIC CP devices contain direct memory access vulnerabilities that could allow an attacker to execute code, access the PROFINET network without restrictions or perform denial of service attacks.
Siemens recommends specific countermeasures for products where updates are not, or not yet available.
Vulnerabilities 2
-
Medium 6.7
A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 …
-
Medium 4.4
A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 …
Revision history
-
#1
Publication Date
References
-
SSA-784849: Direct Memory Access Vulnerabilities in SIMATIC CP Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-784849.html
-
SSA-784849: Direct Memory Access Vulnerabilities in SIMATIC CP Devices - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-784849.pdf
-
SSA-784849: Direct Memory Access Vulnerabilities in SIMATIC CP Devices - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-784849.txt
-
ICS Advisory ICSA-23-285-01 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-285-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B