Summary
Security researchers published information on a vulnerability known as Crosstalk (INTEL-SA-00320). This vulnerability affects modern Intel processors to a varying degree.
Several Siemens Industrial Products contain processors that are affected by the vulnerability.
Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
Vulnerabilities 1
-
Unscored —
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticate…
Revision history
-
#7
Added solution for SIMATIC IPC3000 SMART V2 and clarified that no further fixes are planned
-
#6
Added solution for SIMATIC IPC527G
-
#5
Added solution for SIMATIC ITP1000 and SIMATIC IPC547G
-
#4
Added solution for SIMATIC Field PG M5, and SIMATIC Field PG M6
-
#3
Added solution for SIMATIC IPC427E, SIMATIC IPC477E, and SIMATIC IPC477E PRO
-
#2
Removed SINUMERIK 840D sl (NCU730.3B), SINUMERIK 828D (PPU.4 / PPU1740), and SINUMERIK ONE (NCU1750 / NCU1760) from the list of affected products. Added solution for SIMATIC IPC627E, SIMATIC IPC647E, SIMATIC IPC677E, and SIMATIC IPC847E
-
#1
Publication Date
References
-
SSA-534763: Special Register Buffer Data Sampling (SRBDS) aka Crosstalk in Industrial Products - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-534763.pdf
-
SSA-534763: Special Register Buffer Data Sampling (SRBDS) aka Crosstalk in Industrial Products - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-534763.txt