Skip to content
OpenAdvisories
Medium SSA-478960 1 CVE

SSA-478960: Missing CSRF Protection in the Web Server Login Page of Industrial Controllers

Published Nov 8, 2022 · Updated Sep 12, 2023 · Revision 8

Vendor: Siemens Product: SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0) Product: SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0) Product: SIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0) Product: SIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0) Product: SIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) Product: SIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0) Product: SIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0) Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) Product: SIMATIC PC Station Product: SIMATIC S7-1200 CPU family (incl. SIPLUS variants) Product: SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ00-0AB0) Product: SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0) Product: SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ00-0AB0) Product: SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK00-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0) Product: SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0) Product: SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Product: SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK00-0AB0) Product: SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0) Product: SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0) Product: SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0) Product: SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0) Product: SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0) Product: SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Product: SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK00-0AB0) Product: SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0) Product: SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DK00-0AB0) +121 more

Summary

The web server login page of affected products does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack..

Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #8

    Added the affected product SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants); Clarified SIMATIC S7-1500 Software Controller versions and adjusted fix for SIMATIC S7-1500 Software Controller V2

  2. #7

    Added fix for SINUMERIK ONE

  3. #6

    Added fix for SIMATIC S7-1500 CPU V2 firmware versions; Fix for SIMATIC Drive Controller available already with V2.9.7

  4. #5

    Added fix for SIMATIC S7-1500 Software Controller

  5. #4

    Replaced S7-1500 with list of individual devices and clarified individual fix state, added fix for SIMATIC WinCC Runtime Advanced

  6. #3

    No fix planned for SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)

  7. #2

    Added fix for SIMATIC Drive Controller family, SIMATIC S7-PLCSIM Advanced, and SIMATIC S7-1500 and S7-1200 CPU families

  8. #1

    Publication Date

References