← Back to home
ICSA-19-099-06  ·  Published 2025-05-06  ·  View on CISA ICS-CERT ↗

Siemens SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM (Update I)

CVSS 7.5 HIGH

CVEs (1)

Remediations

  • Restrict network access to the integrated webserver
  • Deactivate the webserver if not required, and if deactivation is supported by the product
  • Migrate to a successor product within the SCALANCE M-800 family. For details refer to the notice of discontinuation at https://support.industry.siemens.com/cs/ww/en/view/109781070
  • Migrate to a successor product within the SIMATIC RF18xC/CI family, V1.3 (see https://support.industry.siemens.com/cs/ww/en/view/109781665) or later version. For details refer to the phase-out announcement at https://support.industry.siemens.com/cs/ww/en/view/109783832
  • Currently no fix is planned
  • Update to V3.3 or later version
  • Update to V5.1 SP1 HF8 or later version
  • Update to V2.7 or later version
  • Update to V2.0 SP1 UPD1 or later version
  • Update to V5.1.3 or later version
  • Update to V1.1.0 or later version
  • Update to V1.5 or later version
  • Update to V1.1 or later version
  • Update to V15.1 Upd4 or later version
  • Update to V2.6.1 or later version
  • Update to latest version of V5.2
  • Update to V4.8 HF6
  • Update to V5.1 SP1 HF4 or later version, or to latest version of V5.2
  • Update to V5.1 SP1 HF4 or later version
  • Update to V2.3 or later version
  • Update to V2.1.3 or later version
  • Update to V1.1.3 or later version
  • Update to V2.1.6 or later version
  • Update to V3.2.1 or later version
  • Update to V2.1 or later version
  • Update to V2010 SP3 or later version and apply BIOS and Microsoft Windows updates
  • Update to V3.2.16 or later version
  • Update to V3.3.16 or later version

Affected Vendors

Siemens

Affected Products (86)

Siemens · SIMATIC CP 1604 (6GK1160-4AA01) vers:all/*
Siemens · SIMATIC CP 1616 (6GK1161-6AA02) vers:all/*
Siemens · SIMATIC CP 343-1 Advanced (6GK7343-1GX31-0XE0) vers:all/*
Siemens · SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) <V3.3
Siemens · SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) <V3.3
Siemens · SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) <V3.3
Siemens · SIMATIC CP 443-1 OPC UA (6GK7443-1UX00-0XE0) vers:all/*
Siemens · SIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0) <V3.2.16
Siemens · SIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0) <V3.2.16
Siemens · SIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) <V3.2.16
Siemens · SIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0) <V3.2.16
Siemens · SIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0) <V3.2.16
Siemens · SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) <V2.1.6
Siemens · SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) <V2.7
Siemens · SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants) <V15.1_Upd4
Siemens · SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants) <V15.1_Upd4
Siemens · SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F <V15.1_Upd4
Siemens · SIMATIC IPC DiagMonitor <V5.1.3
Siemens · SIMATIC RF182C (6GT2002-0JD10) vers:all/*
Siemens · SIMATIC RF185C (6GT2002-0JE10) <V1.1.0
Siemens · SIMATIC RF186C (6GT2002-0JE20) <V1.1.0
Siemens · SIMATIC RF188C (6GT2002-0JE40) <V1.1.0
Siemens · SIMATIC RF600R family <V3.2.1
Siemens · SIMATIC RFID 181EIP (6GT2002-0JD20) vers:all/*
Siemens · SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) <V2.6.1
Siemens · SIMATIC S7-1500 Software Controller <V2.7
Siemens · SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0) <V3.3.16
Siemens · SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0) <V3.2.16
Siemens · SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0) <V3.2.16
Siemens · SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0) <V3.2.16
Siemens · SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0) <V3.2.16
Siemens · SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0) <V3.2.16
Siemens · SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0) <V3.2.16
Siemens · SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0) <V3.2.16
Siemens · SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0) <V3.2.16
Siemens · SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0) <V3.2.16
Siemens · SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) vers:all/*
Siemens · SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) vers:all/*
Siemens · SIMATIC S7-PLCSIM Advanced <V2.0_SP1_UPD1
Siemens · SIMATIC Teleservice Adapter IE Advanced vers:all/*
Siemens · SIMATIC Teleservice Adapter IE Basic vers:all/*
Siemens · SIMATIC Teleservice Adapter IE Standard vers:all/*
Siemens · SIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0) <V2010_SP3
Siemens · SIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0) <V2010_SP3
Siemens · SIMATIC WinCC Runtime Advanced <V15.1_Upd4
Siemens · SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants) <V1.1.3
Siemens · SIMOCODE pro V PROFINET (incl. SIPLUS variants) <V2.1.3
Siemens · SINAMICS G130 V4.6 Control Unit vers:all/*
Siemens · SINAMICS G130 V4.7 Control Unit vers:all/*
Siemens · SINAMICS G130 V4.7 SP1 Control Unit vers:all/*
Siemens · SINAMICS G130 V4.8 Control Unit <V4.8_HF6
Siemens · SINAMICS G130 V5.1 Control Unit vers:all/*
Siemens · SINAMICS G130 V5.1 SP1 Control Unit <V5.1_SP1_HF4
Siemens · SINAMICS G150 V4.6 Control Unit vers:all/*
Siemens · SINAMICS G150 V4.7 Control Unit vers:all/*
Siemens · SINAMICS G150 V4.7 SP1 Control Unit vers:all/*
Siemens · SINAMICS G150 V4.8 Control Unit <V4.8_HF6
Siemens · SINAMICS G150 V5.1 Control Unit vers:all/*
Siemens · SINAMICS G150 V5.1 SP1 Control Unit <V5.1_SP1_HF4
Siemens · SINAMICS S120 V4.6 Control Unit (incl. SIPLUS variants) vers:all/*
Siemens · SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants) vers:all/*
Siemens · SINAMICS S120 V4.7 SP1 Control Unit (incl. SIPLUS variants) vers:all/*
Siemens · SINAMICS S120 V4.8 Control Unit (incl. SIPLUS variants) <V4.8_HF6
Siemens · SINAMICS S120 V5.1 Control Unit (incl. SIPLUS variants) vers:all/*
Siemens · SINAMICS S120 V5.1 SP1 Control Unit (incl. SIPLUS variants) <V5.1_SP1_HF4
Siemens · SINAMICS S150 V4.6 Control Unit vers:all/*
Siemens · SINAMICS S150 V4.7 Control Unit vers:all/*
Siemens · SINAMICS S150 V4.7 SP1 Control Unit vers:all/*
Siemens · SINAMICS S150 V4.8 Control Unit <V4.8_HF6
Siemens · SINAMICS S150 V5.1 Control Unit vers:all/*
Siemens · SINAMICS S150 V5.1 SP1 Control Unit <V5.1_SP1_HF4
Siemens · SINAMICS S210 <V5.1_SP1_HF8
Siemens · SIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0) <V3.2.16
Siemens · SIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0) <V3.2.16
Siemens · SIPLUS NET CP 343-1 Advanced (6AG1343-1GX31-4XE0) vers:all/*
Siemens · SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) <V3.3
Siemens · SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) <V3.3
Siemens · SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0) <V3.3.16
Siemens · SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0) <V3.2.16
Siemens · SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0) <V3.2.16
Siemens · SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0) <V3.2.16
Siemens · SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0) <V3.2.16
Siemens · SITOP Manager <V1.1
Siemens · SITOP PSU8600 <V1.5
Siemens · SITOP UPS1600 (incl. SIPLUS variants) <V2.3
Siemens · TIM 1531 IRC (incl. SIPLUS NET variants) <V2.1

Affected Sectors

Multiple

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more