ICSA-16-355-01
·
Published 2025-06-05
·
View on CISA ICS-CERT ↗
Siemens Desigo PX Web Module Insufficient Entropy Vulnerability
CVSS 5.9
MEDIUM
CVEs (1)
Remediations
- Siemens provides firmware update V6.00.046 for the affected devices, which fixes the vulnerability. Siemens recommends that all users operating an affected device apply the update. The firmware updates for Desigo PX Web modules can be obtained from: (https://support.industry.siemens.com/cs/ww/en/view/109742824)
- Until patches can be applied, Siemens recommends the following: Protect network access. Apply a defense-in-depth strategies. Restrict access to Port 443/TCP of Desigo PX-Web modules. Disable the web server.
- For more information on this vulnerability and more detailed mitigation instructions, please see Siemens Security Advisory SSA-856492 at the following location: (http://www.siemens.com/cert/advisories)
Affected Vendors
Siemens
Affected Products (21)
Siemens
·
Desigo PX Web module PXA40-W0 firmware for Desigo PX automation controllers PXC00-E.D
<V6.00.046
Siemens
·
Desigo PX Web module PXA40-W0 firmware for Desigo PX automation controllers PXC50-E.D
<V6.00.046
Siemens
·
Desigo PX Web module PXA40-W0 firmware for Desigo PX automation controllers PXC100-E.D
<V6.00.046
Siemens
·
Desigo PX Web module PXA40-W0 firmware for Desigo PX automation controllers PXC200-E.D
<V6.00.046
Siemens
·
Desigo PX Web module PXA40-W1 firmware for Desigo PX automation controllers PXC00-E.D
<V6.00.046
Siemens
·
Desigo PX Web module PXA40-W1 firmware for Desigo PX automation controllers PXC50-E.D
<V6.00.046
Siemens
·
Desigo PX Web module PXA40-W1 firmware for Desigo PX automation controllers PXC100-E.D
<V6.00.046
Siemens
·
Desigo PX Web module PXA40-W1 firmware for Desigo PX automation controllers PXC200-E.D
<V6.00.046
Siemens
·
Desigo PX Web module PXA40-W2 firmware for Desigo PX automation controllers PXC00-E.D
<V6.00.046
Siemens
·
Desigo PX Web module PXA40-W2 firmware for Desigo PX automation controllers PXC50-E.D
<V6.00.046
Siemens
·
Desigo PX Web module PXA40-W2 firmware for Desigo PX automation controllers PXC100-E.D
<V6.00.046
Siemens
·
Desigo PX Web module PXA40-W2 firmware for Desigo PX automation controllers PXC200-E.D
<V6.00.046
Siemens
·
Desigo PX Web module PXA30-W0 firmware for Desigo PX automation controllers PXC00-U
<V6.00.046
Siemens
·
Desigo PX Web module PXA30-W0 firmware for Desigo PX automation controllers PXC64-U
<V6.00.046
Siemens
·
Desigo PX Web module PXA30-W0 firmware for Desigo PX automation controllers PXC128-U
<V6.00.046
Siemens
·
Desigo PX Web module PXA30-W1 firmware for Desigo PX automation controllers PXC00-U
<V6.00.046
Siemens
·
Desigo PX Web module PXA30-W1 firmware for Desigo PX automation controllers PXC64-U
<V6.00.046
Siemens
·
Desigo PX Web module PXA30-W1 firmware for Desigo PX automation controllers PXC128-U
<V6.00.046
Siemens
·
Desigo PX Web module PXA30-W2 firmware for Desigo PX automation controllers PXC00-U
<V6.00.046
Siemens
·
Desigo PX Web module PXA30-W2 firmware for Desigo PX automation controllers PXC64-U
<V6.00.046
Siemens
·
Desigo PX Web module PXA30-W2 firmware for Desigo PX automation controllers PXC128-U
<V6.00.046
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more