ICSA-18-060-01
·
Published 2018-04-19
·
View on CISA ICS-CERT ↗
ICSA-18-060-01_Siemens SIMATIC, SIMOTION, and SINUMERIK (Update A)
CVSS 8.2
HIGH
CVEs (3)
Remediations
- As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
- Additional information on Industrial Security by Siemens
- SIMATIC Field-PG M3: Update to V6.2.61.3535 or higher, which can be located here
- SIMATIC Field-PG M4: Update to V18.01.06 or higher, which can be located here
- SIMATIC Field-PG M5: Update to V22.01.04 or higher, which can be located here
- SIMATIC HMI IPC677C: Update to V6.2.61.3535 or higher, which can be located here
- SIMATIC IPC427D: Update to V17.0?.10 or higher, which can be located here
- SIMATIC IPC427E: Update to V21.01.07 or higher, which can located here
- SIMATIC IPC477D: Update to V17.0?.10 or higher, which can located here
- SIMATIC IPC477D PRO: Update to V17.0?.10 or higher, which can located here
- SIMATIC IPC477E: Update to V21.01.07 or higher, which can be located here
- SIMATIC IPC547D: Update to V7.1.91.3272 or higher, which can be located here
- SIMATIC IPC547E: Update to V9.1.41.3024 or higher, which can be located here
- SIMATIC IPC547G: Update to V11.8.50.3425 and R1.21.0 or higher, which can be located here
- SIMATIC IPC627C: Update to V6.2.61.3535 or higher, which can be located here
- SIMATIC IPC627D: Update to V9.1.41.3024 or higher, which can be located here
- SIMATIC IPC647C: Update to V6.2.61.3535 or higher, which can be located here
- SIMATIC IPC647D: Update to V9.1.41.3024 or higher, which can be located here
- SIMATIC IPC677D: Install V9.1.41.3024 or higher, which can be located here
- SIMATIC IPC827C: Update to V6.2.61.3535 or higher, which can be located here
- SIMATIC IPC827D: Update to V9.1.41.3024 or higher, which can be located here
- SIMATIC IPC847C: Update to V6.2.61.3535 or higher, which can be located here
- SIMATIC IPC847D: Update to V9.1.41.3024 or higher, which can be located here
- SIMATIC ITP1000: Update to V23.01.03 or higher, which can be located here
- SINUMERIK PCU50.5-C, WIN7: Update to V6.2.61.3535 or higher, which can be located here
- SINUMERIK PCU50.5-C, WINXP: Update to V6.2.61.3535 or higher, which can be located here
- SINUMERIK PCU50.5-P, WIN7: Update to V6.2.61.3535 or higher, which can be located here
- SINUMERIK PCU50.5-P, WINXP: Update to V6.2.61.3535 or higher, which can be located here
- SIMOTION P320-4S: Update to S17.02.06.83.1 or higher, which can be located here
Affected Vendors
Siemens
Affected Products (27)
Siemens
·
SINUMERIK PCU50.5-P WINXP
< 6.2.61.3535
Siemens
·
SINUMERIK PCU50.5-C WINXP
< 6.2.61.3535
Siemens
·
SIMATIC IPC477D PRO
< 17.0 ?.10
Siemens
·
SINUMERIK PCU50.5-C WIN7
< 6.2.61.3535
Siemens
·
SIMATIC IPC647D
< 9.1.41.3024
Siemens
·
SIMATIC IPC847D
< 9.1.41.3024
Siemens
·
SIMATIC IPC627C
< 6.2.61.3535
Siemens
·
SINUMERIK PCU50.5-P WIN7
< 6.2.61.3535
Siemens
·
SIMATIC IPC547G
< 11.8.50.3425 (ME) | < R1.21.0 (BIOS)
Siemens
·
SIMOTION P320-4S
< S17.02.06.83.1
Siemens
·
SIMATIC IPC647C
< 6.2.61.3535
Siemens
·
SIMATIC Field-PG M3
< 6.2.61.3535
Siemens
·
SIMATIC IPC477D
< 17.0 ?.10
Siemens
·
SIMATIC IPC677D
< 9.1.41.3024
Siemens
·
SIMATIC Field-PG M4
< 18.01.06
Siemens
·
SIMATIC IPC627D
< 9.1.41.3024
Siemens
·
SIMATIC ITP1000
< 23.01.03
Siemens
·
SIMATIC IPC547D
< 7.1.91.3272
Siemens
·
SIMATIC IPC847C
< 6.2.61.3535
Siemens
·
SIMATIC Field-PG M5
< 22.01.04
Siemens
·
SIMATIC IPC477E
< 21.01.07
Siemens
·
SIMATIC IPC427D
< 17.0 ?.10
Siemens
·
SIMATIC IPC827D
< 9.1.41.3024
Siemens
·
SIMATIC HMI IPC677C
< 6.2.61.3535
Siemens
·
SIMATIC IPC427E
< 21.01.07
Siemens
·
SIMATIC IPC547E
< 9.1.41.3024
Siemens
·
SIMATIC IPC827C
< 6.2.61.3535
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more