ICSA-24-165-04 · Published 2024-06-11 · View on CISA ICS-CERT ↗

Siemens ST7 ScadaConnect

CVSS 8.2 HIGH CISA KEV — Known Exploited

CVEs (37)

CVE-2022-40303 CVE-2022-40304 CVE-2023-0464 CVE-2023-0465 CVE-2023-0466 CVE-2023-3446 CVE-2023-5678 CVE-2023-21808 CVE-2023-24895 CVE-2023-24897 CVE-2023-24936 CVE-2023-28260 CVE-2023-28484 CVE-2023-29331 CVE-2023-29469 CVE-2023-32032 CVE-2023-33126 CVE-2023-33127 CVE-2023-33128 CVE-2023-33135 CVE-2023-33170 CVE-2023-35390 CVE-2023-35391 CVE-2023-36038 CVE-2023-36049 CVE-2023-36435 CVE-2023-36558 CVE-2023-36792 CVE-2023-36793 CVE-2023-36794 CVE-2023-36796 CVE-2023-36799 CVE-2023-38171 CVE-2023-38178 CVE-2023-38180 CVE-2023-39615 CVE-2023-44487

Remediations

Update to V1.1 or later version

Affected Vendors

Siemens

Affected Products (1)

Siemens · ST7 ScadaConnect (6NH7997-5DA10-0AA0) <V1.1

Affected Sectors

Multiple

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more