Skip to content
OpenAdvisories
High SSA-678983 4 CVEs

SSA-678983: Vulnerabilities in Industrial PCs and CNC devices using Intel CPUs (November 2020)

Published May 11, 2021 · Updated Dec 13, 2022 · Revision 7

Vendor: Siemens Product: SIMATIC Drive Controller family Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) Product: SIMATIC Field PG M5 Product: SIMATIC Field PG M6 Product: SIMATIC IPC127E Product: SIMATIC IPC427E (incl. SIPLUS variants) Product: SIMATIC IPC477E Product: SIMATIC IPC477E PRO Product: SIMATIC IPC527G Product: SIMATIC IPC547G Product: SIMATIC IPC627E Product: SIMATIC IPC647E Product: SIMATIC IPC677E Product: SIMATIC IPC847E Product: SIMATIC ITP1000 Product: SINUMERIK 828D HW PU.4 Product: SINUMERIK MC MCU 1720 Product: SINUMERIK ONE / SINUMERIK 840D sl Handheld Terminal HT 10 Product: SINUMERIK ONE NCU 1740 Product: SINUMERIK ONE PPU 1740

Summary

Intel has published information on vulnerabilities in Intel products in
November 2020.
This advisory lists the Siemens IPC related products, that are affected by these vulnerabilities.
In this advisory we take a representative CVE from each advisory:

-
“Intel CSME, SPS, TXE, AMT and DAL Advisory” Intel-SA-00391 is represented by CVE-2020-8745

-
“Intel RAPL Interface Advisory” Intel-SA-00389 is represented by CVE-2020-8694

-
“Intel Processor Advisory” Intel-SA-00381 is represented by CVE-2020-8698, and

-
“BIOS Advisory” Intel-SA-00358 is represented by CVE-2020-0590.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 4

Revision history

  1. #7

    Added fix for SINUMERIK ONE / 840D sl Handheld Terminal HT 10

  2. #6

    Added fix for SIMATIC Field PG M6

  3. #5

    Added solution for SIMATIC IPC547G

  4. #4

    Added solution for SIMATIC ET 200SP Open Controller CPU 1515SP PC2

  5. #3

    Added remediations for SIMATIC IPC127E, SINUMERIK 828D HW PU.4, SINUMERIK MC MCU 1720, SINUMERIK ONE NCU 1740 and SINUMERIK ONE PPU 1740, added SIMATIC Drive Controller

  6. #2

    Added remediations for SIMATIC IPC427E, SIMATIC IPC477E (PRO), and SIMATIC IPC527G

  7. #1

    Publication Date

References