ICSA-22-195-12
·
Published 2023-03-14
·
View on CISA ICS-CERT ↗
Siemens SRCS VPN Feature in SIMATIC CP Devices
CVSS 10.0
CRITICAL
CVEs (3)
Remediations
- Make sure to configure the CP to only connect to trusted SINEMA Remote Connect Server instances
- Update to V2.2.28 or later version
- Update to V3.3.46 or later version
- Update to V3.0.22 or later version
- Block access to port 5243/udp e.g. with an external firewall if possible
- Disable the SINEMA Remote Connect Server (SRCS) VPN feature
Affected Vendors
Siemens
Affected Products (15)
Siemens
·
SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)
<V3.3.46
Siemens
·
SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
<V3.3.46
Siemens
·
SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)
<V3.3.46
Siemens
·
SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)
<V3.3.46
Siemens
·
SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
<V3.3.46
Siemens
·
SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
>=V2.0_<V2.2.28
Siemens
·
SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)
<V3.0.22
Siemens
·
SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
>=V2.0_<V2.2.28
Siemens
·
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
>=V2.0_<V2.2.28
Siemens
·
SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
>=V2.0_<V2.2.28
Siemens
·
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
>=V2.0_<V2.2.28
Siemens
·
SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)
<V3.3.46
Siemens
·
SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)
<V3.0.22
Siemens
·
SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
<V3.3.46
Siemens
·
SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
<V3.3.46
Affected Sectors
Multiple
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more