Siemens SINAMICS PERFECT HARMONY GH180 (Update A)

Risk Summary

Successful exploitation of this vulnerability could result in arbitrary code execution and unauthorized access to sensitive data.

CVEs (1)

Remediations

• Siemens has identified the following specific mitigations and workarounds users can apply to reduce the risk:
• As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens operational guidelines for industrial security, and follow the recommendations in the product manual. Additional information on industrial security by Siemens can be found at: https://www.siemens.com/industrialsecurity For more information about this issue, please see Siemens security advisories SSA-434535 and SSA-434534.

Affected Vendors

Affected Products (3)

Affected Sectors

Critical Manufacturing, Energy