SSA-501073 V1.1 (Last Update: 2022-03-08): Vulnerabilities in Controllers CPU 1518 MFP using Intel CPUs (November 2020)

Risk Summary

<p>Intel has published information on vulnerabilities in Intel products in <a href="https://blogs.intel.com/technology/2020/11/ipas-security-advisories-for-november-2020/">November 2020</a>. This advisory lists the Siemens Controllers that are affected by these vulnerabilities.</p> <p>In this advisory we take a representative CVE from each advisory:</p> <ul> <li><p>“Intel CSME, SPS, TXE, AMT and DAL Advisory” Intel-SA-00391 is represented by CVE-2020-8744</p></li> <li><p>“BIOS Advisory” Intel-SA-00358 is represented by CVE-2020-0591.</p></li> </ul> <p>Siemens is currently working on BIOS updates that include chipset microcode updates and recommends specific countermeasures for products where updates are not, or not yet available.</p>

CVEs (2)

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)