Summary
A specific range of produced SINAMICS S200 devices contains an unlocked bootloader vulnerability that could allow an attacker to download untrusted firmware that could damage or compromise the device.
For delivered products listed below Siemens recommends countermeasures.
Vulnerabilities 1
-
Critical 9.8
A vulnerability has been identified in SINAMICS S200 (All versions with serial number beginning with SZVS8, SZVS9, SZVS…
Revision history
-
#1
Publication Date
References
-
SSA-787280: Unlocked Bootloader Vulnerability in SINAMICS S200 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-787280.html
-
ICS Advisory ICSA-25-072-05 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-05
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B