Siemens Industrial Products with OPC UA (Update H)

Risk Summary

Successful exploitation of this vulnerability could cause a denial-of-service condition on the affected service or device.

CVEs (1)

Remediations

• Deactivate the OPC UA Service if supported by the product
• Use VPN for protecting network communication between cells
• Currently no fix is planned
• Update to V3.15 P018 or later version
• Update to V14 SP2 or later version
• Update to V1.0 SP1 or later version
• Update to V2.7 or later version
• Update to V2.1 or later version
• Update to V3.1.1 or later version
• Update to V15.1 Upd 4 or later version
• Update to V5.1.3 or later version
• Update to V1.1.0 or later version
• Update to V3.2.1 or later version
• Update to V2.6.1 or later version
• Update to V15.1 Upd4 or later version
• Update to V14 SP1 Update 14 or later version
• As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

Affected Vendors

Affected Products (19)

Affected Sectors

Chemical, Critical Manufacturing, Energy, Food and Agriculture, Water and Wastewater Systems