Summary
The latest updates for the below mentioned products fix a vulnerability that allows an unauthenticated attacker to read PLC variables from affected devices without proper authentication under certain circumstances.
Siemens has released updates for some of the affected products, is working on updates for the remaining affected products and recommends specific countermeasures until fixes are available.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open C…
Revision history
-
#2
Added solution for SIMATIC ET 200SP Open Controller CPU 1515SP PC2 and SIMATIC S7-1500 Software Controller
-
#1
Publication Date
References
-
SSA-865327: Incorrect Authorization Vulnerability in Industrial Products - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-865327.pdf
-
SSA-865327: Incorrect Authorization Vulnerability in Industrial Products - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-865327.txt