← Back to home
ICSA-20-161-04  ·  Published 2022-12-13  ·  View on CISA ICS-CERT ↗

Siemens SIMATIC, SINAMICS, SINEC, SINEMA, SINUMERIK (Update J)

CVSS 8.8 HIGH

CVEs (1)

Remediations

  • Make sure that there is no executable at the following locations: - C:\\Program.exe, - C:\\Program\ Files\\Common.exe, or - C:\\Program\ Files\\Common\ Files\\Siemens\\Automation\\Simatic.exe
  • Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
  • Currently no fix is planned
  • Update to V13 SP2 Update 4 or later version
  • Update to V14 SP1 Update 10 or later version
  • Update to V15.1 Update 5 or later version
  • Update to V16 Update 2 or later version
  • Update to V5.6 SP2 HF3 or later version
  • Update to version V1.0 SP2 or later version
  • Update to V14 SP3 or later version
  • Update to V6.14 or later version The update can be obtained from Siemens representative or via Siemens customer service
  • Update to V16 Update 3 or later version
  • Update to V3.0 SP1 or later version To obtain SIMATIC PCS neo V3.0 SP1 contact your local support.
  • Update to V3.16 P018 or later version
  • Update to V3.17 P003 or later version
  • Update to V7.4 SP1 Update 14 or later version
  • Update to V7.5 SP1 Update 3 or later version
  • Update to V21.8 or later version
  • Update to V17 or later version <https://support.industry.siemens.com/cs/ww/en/view/10347815/> Note: Some versions of SIMATIC ProSave are not available as separate download (e.g. V17). In this case, use the version of SIMATIC ProSave as bundled with the corresponding version of SIMATIC WinCC (TIA Portal).
  • Update to V4 SP2 or later version
  • Update to V5.4 HF2 or later version
  • Update to V16 Upd3 or later version
  • Update to V14 SP1 Update 14 or later version

Affected Vendors

Siemens

Affected Products (27)

Siemens · SIMATIC Automation Tool <V4_SP2
Siemens · SIMATIC NET PC Software V14 <V14_SP1_Update_14
Siemens · SIMATIC NET PC Software V15 vers:all/*
Siemens · SIMATIC NET PC Software V16 <V16_Upd3
Siemens · SIMATIC PCS neo <V3.0_SP1
Siemens · SIMATIC ProSave <V17
Siemens · SIMATIC S7-1500 Software Controller <V21.8
Siemens · SIMATIC STEP 7 (TIA Portal) V13 <V13_SP2_Update_4
Siemens · SIMATIC STEP 7 (TIA Portal) V14 <V14_SP1_Update_10
Siemens · SIMATIC STEP 7 (TIA Portal) V15 <V15.1_Update_5
Siemens · SIMATIC STEP 7 (TIA Portal) V16 <V16_Update_2
Siemens · SIMATIC STEP 7 V5 <V5.6_SP2_HF3
Siemens · SIMATIC WinCC OA V3.16 <V3.16_P018
Siemens · SIMATIC WinCC OA V3.17 <V3.17_P003
Siemens · SIMATIC WinCC Runtime Advanced <V16_Update_2
Siemens · SIMATIC WinCC Runtime Professional V13 <V13_SP2_Update_4
Siemens · SIMATIC WinCC Runtime Professional V14 <V14_SP1_Update_10
Siemens · SIMATIC WinCC Runtime Professional V15 <V15.1_Update_5
Siemens · SIMATIC WinCC Runtime Professional V16 <V16_Update_2
Siemens · SIMATIC WinCC V7.4 <V7.4_SP1_Update_14
Siemens · SIMATIC WinCC V7.5 <V7.5_SP1_Update_3
Siemens · SINAMICS Startdrive <V16_Update_3
Siemens · SINAMICS STARTER <V5.4_HF2
Siemens · SINEC NMS <V1.0_SP2
Siemens · SINEMA Server <V14_SP3
Siemens · SINUMERIK ONE virtual <V6.14
Siemens · SINUMERIK Operate <V6.14

Affected Sectors

Multiple

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more