Summary
Multiple SIMATIC software products are affected by a vulnerability
that could allow an attacker to change the content of certain
metafiles and subsequently manipulate parameters or behaviour of
devices configured by the affected software products.
Siemens has released updates for several affected products and
recommends to update to the latest versions. Siemens is preparing
further updates and recommends specific countermeasures for products
where updates are not, or not yet available.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions …
Revision history
-
#3
Added solution to SIMATIC PCS 7 V9.X and SIMATIC PDM
-
#2
Added solution for SINAMICS STARTER
-
#1
Publication Date
References
-
SSA-661034: Incorrect Permission Assignment in Multiple SIMATIC Software Products - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-661034.pdf
-
SSA-661034: Incorrect Permission Assignment in Multiple SIMATIC Software Products - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-661034.txt