← Back to home

ICSA-18-079-02 · Published 2023-05-09 · View on CISA ICS-CERT ↗

Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update D)

CVSS 6.5 MEDIUM

CVEs (1)

CVE-2018-4843

Remediations

Use VPN for protecting network communication between cells.
Currently no fix is planned
Update to V3.3 or later version
Update to V7.0.3 or later version
Update to V4.7 SP6 HF1 or later version SINUMERIK software can be obtained from your local Siemens account manager
Update to V6.0.7
Update to V6.0.9
Update to V8.1 or later version
Update to V1.7.0 or later version
Update to V2010 SP3 or later version and apply BIOS and Microsoft Windows updates
Update to V3.2.16 or later version
Update to V3.3.16 or later version

Affected Vendors

Siemens

Affected Products (45)

Siemens · SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0) vers:all/<V7.0.3

Siemens · SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0) vers:all/<V7.0.3

Siemens · SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0) vers:all/<V7.0.3

Siemens · SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0) vers:all/<V7.0.3

Siemens · SIMATIC CP 343-1 (incl. SIPLUS variants) vers:all/*

Siemens · SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) vers:all/*

Siemens · SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) vers:all/<V3.3

Siemens · SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) vers:all/<V3.3

Siemens · SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) vers:all/<V3.3

Siemens · SIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0) vers:all/<V3.2.16

Siemens · SIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0) vers:all/<V3.2.16

Siemens · SIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) vers:all/<V3.2.16

Siemens · SIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0) vers:all/<V3.2.16

Siemens · SIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0) vers:all/<V3.2.16

Siemens · SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) vers:all/<V1.7.0

Siemens · SIMATIC S7-1500 Software Controller vers:all/<V1.7.0

Siemens · SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0) vers:all/<V3.3.16

Siemens · SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0) vers:all/<V3.2.16

Siemens · SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0) vers:all/<V3.2.16

Siemens · SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0) vers:all/<V3.2.16

Siemens · SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0) vers:all/<V3.2.16

Siemens · SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0) vers:all/<V3.2.16

Siemens · SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0) vers:all/<V3.2.16

Siemens · SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0) vers:all/<V3.2.16

Siemens · SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0) vers:all/<V3.2.16

Siemens · SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0) vers:all/<V3.2.16

Siemens · SIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0) vers:all/<V7.0.3

Siemens · SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) vers:all/<V6.0.9

Siemens · SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants) vers:all/<V6.0.7

Siemens · SIMATIC S7-410 CPU family (incl. SIPLUS variants) vers:all/<V8.1

Siemens · SIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0) <V2010_SP3

Siemens · SIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0) <V2010_SP3

Siemens · SINUMERIK 828D <V4.7_SP6_HF1

Siemens · SIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0) vers:all/<V3.2.16

Siemens · SIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0) vers:all/<V3.2.16

Siemens · SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) vers:all/<V3.3

Siemens · SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) vers:all/<V3.3

Siemens · SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0) vers:all/<V3.3.16

Siemens · SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0) vers:all/<V3.2.16

Siemens · SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0) vers:all/<V3.2.16

Siemens · SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0) vers:all/<V3.2.16

Siemens · SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0) vers:all/<V3.2.16

Siemens · SIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0) vers:all/<V7.0.3

Siemens · SIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0) vers:all/<V7.0.3

Siemens · Softnet PROFINET IO for PC-based Windows systems vers:all/*

Affected Sectors

Multiple

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more