Summary
A Denial-of-Service vulnerability has been identified in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC-Software.
Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPC…
Revision history
-
#10
Added solution for SIMATIC NET PC Software V14 and clarified affected versions; Clarified no remediation planned
-
#9
Corrected fixed version for WinCC 7.4
-
#8
Updated patch links for WinCC 7.2 and 7.4
-
#7
Corrected update link for SIMATIC NET PC-Software
-
#6
Updated solution for SIMATIC NET PC-Software
-
#5
Updated solution for SIMATIC BATCH V8.2, OpenPCS 7 V8.2, SIMATIC Route Control V8.2
-
#4
Update for OpenPCS 7 V8.1 and SIMATIC WinCC Runtime Professional V13
-
#3
Updates for PCS 7 8.2
-
#2
Updates for SIMATIC BATCH V8.0 and V8.1
-
#1
Publication Date
References
-
SSA-348629: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC Software - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-348629.pdf
-
SSA-348629: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC Software - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-348629.txt