Summary
Several industrial products contain an out of bounds read vulnerability that could allow an attacker to cause a Blue Screen of Death (BSOD) crash of the underlying Windows kernel, leading to denial of service condition.
Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
Vulnerabilities 1
-
Medium 6.5
A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All v…
Revision history
-
#7
Updated remediation of SIMATIC NET PC Software V17 to no fix planned
-
#6
Added fix for SIMATIC S7-PCT, SIMATIC STEP 7 V5, SIMATIC WinCC Runtime Advanced and Totally Integrated Automation Portal (TIA Portal) V17
-
#5
Added fix for SINUMERIK PLC Programming Tool
-
#4
Added fix for SIMATIC NET PC Software V19
-
#3
Added fix for SIMATIC PCS 7 V9.1, SIMATIC BATCH V9.1, SIMATIC WinCC Runtime Professional V17, SIMATIC Automation Tool, Simatic NET PC Software V16, SIMATIC Route Control V9.1 and SIMATIC PDM V9.2
-
#2
Added fix for SIMATIC NET PC Software V18, SIMATIC WinCC Runtime Professional V16, V18, and V19 and SIMATIC WinCC V7.5, and V8.0, and TIA Portal V18
-
#1
Publication Date
References
-
SSA-962515: Out of Bounds Read Vulnerability in Industrial Products - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-962515.html