Siemens SIMATIC S7-300 and S7-400 CPUs (Update C)

Risk Summary

Successful exploitation of this vulnerability could result in credential disclosure.

CVEs (1)

Remediations

• Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
• As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens ' operational guidelines for Industrial Security, and following the recommendations in the product manuals.
• Follow this link for additional information on Industrial Security by Siemens.
• For more information on this vulnerability and the associated mitigations, please see Siemens security advisory SSA-381684

Affected Vendors

Affected Products (4)

Affected Sectors

Critical Manufacturing