ICSA-22-286-14
·
Published 2022-10-11
·
View on CISA ICS-CERT ↗
Siemens SIMATIC HMI Panels
CVSS 7.5
HIGH
CVEs (1)
Remediations
- Update to V17 Update 4 or later version
- Update to V17 Update 5 or later version
- Restrict access to port 5001/tcp and 5002/tcp to trusted IP addresses only
Affected Vendors
Siemens
Affected Products (10)
Siemens
·
SIMATIC HMI Comfort Panels (incl. SIPLUS variants)
<V17_Update_4
Siemens
·
SIMATIC HMI KTP Mobile Panels
<V17_Update_4
Siemens
·
SIMATIC HMI KTP1200 Basic (6AV2123-2MB03-0AX0)
<V17_Update_5
Siemens
·
SIMATIC HMI KTP400 Basic (6AV2123-2DB03-0AX0)
<V17_Update_5
Siemens
·
SIMATIC HMI KTP700 Basic (6AV2123-2GB03-0AX0)
<V17_Update_5
Siemens
·
SIMATIC HMI KTP900 Basic (6AV2123-2JB03-0AX0)
<V17_Update_5
Siemens
·
SIPLUS HMI KTP1200 BASIC (6AG1123-2MB03-2AX0)
<V17_Update_5
Siemens
·
SIPLUS HMI KTP400 BASIC (6AG1123-2DB03-2AX0)
<V17_Update_5
Siemens
·
SIPLUS HMI KTP700 BASIC (6AG1123-2GB03-2AX0)
<V17_Update_5
Siemens
·
SIPLUS HMI KTP900 BASIC (6AG1123-2JB03-2AX0)
<V17_Update_5
Affected Sectors
Multiple
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more