Summary
The latest update for SIMATIC Process Historian (PH) fixes an authentication vulnerability in the configuration interface of redundant PH instances that could enable the execution of admin operations on the database.
The related vulnerable interface is restricted to local access on recent versions starting from SIMATIC Process Historian 2020.
Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in SIMATIC Process Historian 2013 and earlier (All versions), SIMATIC Process Histo…
Revision history
-
#2
Added solution for SIMATIC Process Historian 2020
-
#1
Publication Date
References
-
SSA-766247: Authentication Vulnerability in SIMATIC Process Historian - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-766247.pdf
-
SSA-766247: Authentication Vulnerability in SIMATIC Process Historian - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-766247.txt