Summary
The products listed below contain a denial of service vulnerability that could allow an attacker to force the devices into protection mode under certain conditions. This disables remote connectivity functions (Web Access) to the devices.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
Vulnerabilities 1
-
Medium 6.5
A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface …
Revision history
-
#2
Initial CISA Republication of Siemens ProductCERT SSA-823812 advisory
-
#1
Publication Date
References
-
SSA-823812: Denial of Service Vulnerability in WTV676 and WTV776 devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-823812.html
-
ICS Advisory ICSA-26-265-08 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-08
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b