Skip to content
OpenAdvisories
Low SSA-273799 1 CVE

SSA-273799: Message Integrity Protection Bypass Vulnerability in SIMATIC Products

Published Dec 10, 2019 · Updated Apr 12, 2022 · Revision 4

Vendor: Siemens Product: SIMATIC CP 1626 Product: SIMATIC HMI Panel (incl. SIPLUS variants) Product: SIMATIC NET PC Software V14 Product: SIMATIC NET PC Software V15 Product: SIMATIC STEP 7 (TIA Portal) Product: SIMATIC WinCC (TIA Portal) Product: SIMATIC WinCC OA Product: SIMATIC WinCC Runtime Advanced Product: SIMATIC WinCC Runtime Professional Product: TIM 1531 IRC (incl. SIPLUS NET variants)

Summary

A message integrity protection bypass vulnerability has been identified in several SIMATIC products. The vulnerability could allow an attacker in a Man-in-the-Middle position to modify network traffic exchanged on port 102/tcp to PLCs of the SIMATIC S7-1200, SIMATIC S7-1500 and SIMATIC SoftwareController CPU families.

Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #4

    Added solution for SIMATIC NET PC Software V14 and clarified affected versions; Clarified no remediation planned

  2. #3

    Added links for WinCC Runtime

  3. #2

    Added solution for TIM 1531 IRC and SIMATIC NET PC Software

  4. #1

    Publication Date

References