Summary
Siemens SINUMERIK Controllers are affected by an improper VNC password check vulnerability.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
Vulnerabilities 1
-
High 8.3
A vulnerability has been identified in SINUMERIK 828D PPU.4 (All versions < V4.95 SP5), SINUMERIK 828D PPU.5 (All versi…
Revision history
-
#1
Publication Date
References
-
SSA-177847: Improper VNC Password Check Vulnerability in SINUMERIK Controllers - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-177847.html
-
ICS Advisory ICSA-25-226-19 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-19
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B