Siemens Desigo PXC and DXR Devices

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to potentially intercept unencrypted transmission of sensitive information, cause a denial-of-service condition, perform remote code execution, or disable and reset a device to factory state.

CVEs (8)

Remediations

• Siemens recommends updating to the latest software version: Desigo DXR2: Update to v01.21.142.5-22 or later
• Siemens recommends updating to the latest software version: Desigo PXC3: Update to v01.21.142.4-18 or later
• Siemens recommends updating to the latest software version: Desigo PXC4: Update to v02.20.142.10-10884 or later
• Siemens recommends updating to the latest software version: Desigo PXC5: Update to v02.20.142.10-10884 or later
• Contact Siemens for update information.
• As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens ' operational guidelines for industrial security and following the recommendations in the product manuals.
• For additional information, please refer to Siemens Security Advisory SSA-626968
• For additional information, please refer to Siemens Security Advisory SSA-662649

Affected Vendors

Affected Products (4)

Affected Sectors

Multiple Sectors