Summary
Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver to perform a denial of service attack.
Siemens has released a new version for SINAMICS S120 (incl. SIPLUS variants) and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
Vulnerabilities 2
-
High 7.5
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All vers…
-
High 7.5
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All vers…
Revision history
-
#1
Publication date
References
-
SSA-892915: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-892915.html
-
SSA-892915: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-892915.pdf
-
SSA-892915: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-892915.txt
-
ICS Advisory ICSA-23-348-05 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-05
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B