Siemens SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional, and SIMATIC NET PC Software (Update G)

CVEs (1)

Remediations

• Currently no fix is planned
• Update to OpenPCS 7 V8.1 Upd 5 or later version
• See remediation for PCS 7 V8.2
• See remediation for PCS 7 V9.0
• Update to SIMATIC BATCH V8.0 SP1 Upd21 or later version
• Update to SIMATIC BATCH V8.1 SP1 Upd16 or later version
• Update to SIMATIC BATCH V8.2 Upd10 or later version
• Update to V14 SP1 Update 14 or later version
• Update to V15 SP1 or later version
• Update to V8.2 SP1 or later version
• Update to V9.0 SP1 (Includes Open PCS 7 V9.0 Upd1, SIMATIC Batch V9.0 SP1, SIMATIC Route Control V9.0 Upd1 and SIMATIC WinCC V7.4 SP1 Upd4).
• Update to V13 SP2 Upd2 or later version
• Update to V14 SP1 Upd5 or later version
• Update to WinCC 7.2 Upd 15 or later version
• Update to WinCC 7.3 Upd 16 or later version
• Update to V7.4 SP1 Upd 4 or later version
• Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
• Use VPN for protecting network communication between cells

Affected Vendors

Affected Products (27)

Affected Sectors

Multiple