-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
#####################################################
## N C S C ~ B E V E I L I G I N G S A D V I E S ##
#####################################################
Titel : Kwetsbaarheden verholpen in Siemens producten
Advisory ID : NCSC-2024-0390
Versie : 1.00
Kans : medium
CVE ID : CVE-2023-6874, CVE-2024-4465, CVE-2024-37996,
CVE-2024-37997, CVE-2024-41798, CVE-2024-41902,
CVE-2024-41981, CVE-2024-45181, CVE-2024-45182,
CVE-2024-45463, CVE-2024-45464, CVE-2024-45465,
CVE-2024-45466, CVE-2024-45467, CVE-2024-45468,
CVE-2024-45469, CVE-2024-45470, CVE-2024-45471,
CVE-2024-45472, CVE-2024-45473, CVE-2024-45474,
CVE-2024-45475, CVE-2024-45476, CVE-2024-46886,
CVE-2024-46887, CVE-2024-47046, CVE-2024-47194,
CVE-2024-47195, CVE-2024-47196, CVE-2024-47553,
CVE-2024-47562, CVE-2024-47563, CVE-2024-47565
(Details over de kwetsbaarheden kunt u vinden op
de Mitre website: https://cve.mitre.org/cve/)
Schade : high
URL Redirection to Untrusted Site ('Open Redirect')
Permissive List of Allowed Inputs
Incorrect Authorization
Out-of-bounds Write
Improper Limitation of a Pathname to a Restricted
Directory ('Path Traversal')
Uncontrolled Search Path Element
Cleartext Storage of Sensitive Information
Improper Check for Unusual or Exceptional Conditions
Improper Neutralization of Argument Delimiters in a
Command ('Argument Injection')
Out-of-bounds Read
Authentication Bypass Using an Alternate Path or
Channel
Improper Restriction of Operations within the Bounds
of a Memory Buffer
Heap-based Buffer Overflow
Improper Authentication
Stack-based Buffer Overflow
NULL Pointer Dereference
Improper Neutralization of Special Elements used in a
Command ('Command Injection')
Uitgiftedatum : 20241008
Toepassing : siemens dc
siemens dp
siemens dp_mfp
siemens dp_odk
siemens dp_rail
siemens dp_tx_rail
siemens jt2go
siemens jt_open
siemens modelsim
siemens plm_xml_sdk
siemens pss_r_sincal
siemens questa
siemens rly
siemens ruggedcom_ape1808lnx__6gk6015-0al20-0gh0_
siemens ruggedcom_ape1808lnx_cc__6gk6015-0al20-0gh1_
siemens sentron_7km_pac3200
siemens sentron_powercenter_1000__7kn1110-0mc00_
siemens siemens_sinec_security_monitor
siemens simatic_drive_controller_cpu_1504d_tf
siemens simatic_drive_controller_cpu_1504d_tf__6es7615
-4df10-0ab0_
siemens simatic_drive_controller_cpu_1507d_tf
siemens simatic_drive_controller_cpu_1507d_tf__6es7615
-7df10-0ab0_
siemens simatic_et_200sp_open_controller_cpu_1515sp_pc
2__incl._siplus_variants_
siemens simatic_et_200sp_open_controller_cpu_1515sp_pc
2_incl._siplus_variants_
siemens simatic_s7-1200_cpu_1211c_ac
siemens simatic_s7-1200_cpu_1211c_ac_dc_rly
siemens simatic_s7-1200_cpu_1211c_ac_dc_rly__6es7211-
1be40-0xb0_
siemens simatic_s7-1200_cpu_1211c_dc
siemens simatic_s7-1200_cpu_1211c_dc_dc_dc
siemens simatic_s7-1200_cpu_1211c_dc_dc_dc__6es7211-
1ae40-0xb0_
siemens simatic_s7-1200_cpu_1211c_dc_dc_rly
siemens simatic_s7-1200_cpu_1211c_dc_dc_rly__6es7211-
1he40-0xb0_
siemens simatic_s7-1200_cpu_1212c_ac
siemens simatic_s7-1200_cpu_1212c_ac_dc_rly
siemens simatic_s7-1200_cpu_1212c_ac_dc_rly__6es7212-
1be40-0xb0_
siemens simatic_s7-1200_cpu_1212c_dc
siemens simatic_s7-1200_cpu_1212c_dc_dc_dc
siemens simatic_s7-1200_cpu_1212c_dc_dc_dc__6es7212-
1ae40-0xb0_
siemens simatic_s7-1200_cpu_1212c_dc_dc_rly
siemens simatic_s7-1200_cpu_1212c_dc_dc_rly__6es7212-
1he40-0xb0_
siemens simatic_s7-1200_cpu_1212fc_dc
siemens simatic_s7-1200_cpu_1212fc_dc_dc_dc
siemens simatic_s7-1200_cpu_1212fc_dc_dc_dc__6es7212-
1af40-0xb0_
siemens simatic_s7-1200_cpu_1212fc_dc_dc_rly
siemens simatic_s7-1200_cpu_1212fc_dc_dc_rly__6es7212-
1hf40-0xb0_
siemens simatic_s7-1200_cpu_1214c_ac
siemens simatic_s7-1200_cpu_1214c_ac_dc_rly
siemens simatic_s7-1200_cpu_1214c_ac_dc_rly__6es7214-
1bg40-0xb0_
siemens simatic_s7-1200_cpu_1214c_dc
siemens simatic_s7-1200_cpu_1214c_dc_dc_dc
siemens simatic_s7-1200_cpu_1214c_dc_dc_dc__6es7214-
1ag40-0xb0_
siemens simatic_s7-1200_cpu_1214c_dc_dc_rly
siemens simatic_s7-1200_cpu_1214c_dc_dc_rly__6es7214-
1hg40-0xb0_
siemens simatic_s7-1200_cpu_1214fc_dc
siemens simatic_s7-1200_cpu_1214fc_dc_dc_dc
siemens simatic_s7-1200_cpu_1214fc_dc_dc_dc__6es7214-
1af40-0xb0_
siemens simatic_s7-1200_cpu_1214fc_dc_dc_rly
siemens simatic_s7-1200_cpu_1214fc_dc_dc_rly__6es7214-
1hf40-0xb0_
siemens simatic_s7-1200_cpu_1215c_ac
siemens simatic_s7-1200_cpu_1215c_ac_dc_rly
siemens simatic_s7-1200_cpu_1215c_ac_dc_rly__6es7215-
1bg40-0xb0_
siemens simatic_s7-1200_cpu_1215c_dc
siemens simatic_s7-1200_cpu_1215c_dc_dc_dc
siemens simatic_s7-1200_cpu_1215c_dc_dc_dc__6es7215-
1ag40-0xb0_
siemens simatic_s7-1200_cpu_1215c_dc_dc_rly
siemens simatic_s7-1200_cpu_1215c_dc_dc_rly__6es7215-
1hg40-0xb0_
siemens simatic_s7-1200_cpu_1215fc_dc
siemens simatic_s7-1200_cpu_1215fc_dc_dc_dc
siemens simatic_s7-1200_cpu_1215fc_dc_dc_dc__6es7215-
1af40-0xb0_
siemens simatic_s7-1200_cpu_1215fc_dc_dc_rly
siemens simatic_s7-1200_cpu_1215fc_dc_dc_rly__6es7215-
1hf40-0xb0_
siemens simatic_s7-1200_cpu_1217c_dc
siemens simatic_s7-1200_cpu_1217c_dc_dc_dc
siemens simatic_s7-1200_cpu_1217c_dc_dc_dc__6es7217-
1ag40-0xb0_
siemens simatic_s7-1500_cpu_1510sp-1_pn
siemens
simatic_s7-1500_cpu_1510sp-1_pn__6es7510-1dj01-0ab0_
siemens
simatic_s7-1500_cpu_1510sp-1_pn__6es7510-1dk03-0ab0_
siemens simatic_s7-1500_cpu_1510sp_f-1_pn
siemens
simatic_s7-1500_cpu_1510sp_f-1_pn__6es7510-1sj01-0ab0_
siemens
simatic_s7-1500_cpu_1510sp_f-1_pn__6es7510-1sk03-0ab0_
siemens simatic_s7-1500_cpu_1511-1_pn
siemens
simatic_s7-1500_cpu_1511-1_pn__6es7511-1ak01-0ab0_
siemens
simatic_s7-1500_cpu_1511-1_pn__6es7511-1ak02-0ab0_
siemens
simatic_s7-1500_cpu_1511-1_pn__6es7511-1al03-0ab0_
siemens simatic_s7-1500_cpu_1511c-1_pn
siemens
simatic_s7-1500_cpu_1511c-1_pn__6es7511-1ck00-0ab0_
siemens
simatic_s7-1500_cpu_1511c-1_pn__6es7511-1ck01-0ab0_
siemens
simatic_s7-1500_cpu_1511c-1_pn__6es7511-1cl03-0ab0_
siemens simatic_s7-1500_cpu_1511f-1_pn
siemens
simatic_s7-1500_cpu_1511f-1_pn__6es7511-1fk01-0ab0_
siemens
simatic_s7-1500_cpu_1511f-1_pn__6es7511-1fk02-0ab0_
siemens
simatic_s7-1500_cpu_1511f-1_pn__6es7511-1fl03-0ab0_
siemens simatic_s7-1500_cpu_1511t-1_pn
siemens
simatic_s7-1500_cpu_1511t-1_pn__6es7511-1tk01-0ab0_
siemens
simatic_s7-1500_cpu_1511t-1_pn__6es7511-1tl03-0ab0_
siemens simatic_s7-1500_cpu_1511tf-1_pn
siemens
simatic_s7-1500_cpu_1511tf-1_pn__6es7511-1uk01-0ab0_
siemens
simatic_s7-1500_cpu_1511tf-1_pn__6es7511-1ul03-0ab0_
siemens simatic_s7-1500_cpu_1512c-1_pn
siemens
simatic_s7-1500_cpu_1512c-1_pn__6es7512-1ck00-0ab0_
siemens
simatic_s7-1500_cpu_1512c-1_pn__6es7512-1ck01-0ab0_
siemens
simatic_s7-1500_cpu_1512c-1_pn__6es7512-1cm03-0ab0_
siemens simatic_s7-1500_cpu_1512sp-1_pn
siemens
simatic_s7-1500_cpu_1512sp-1_pn__6es7512-1dk01-0ab0_
siemens
simatic_s7-1500_cpu_1512sp-1_pn__6es7512-1dm03-0ab0_
siemens simatic_s7-1500_cpu_1512sp_f-1_pn
siemens
simatic_s7-1500_cpu_1512sp_f-1_pn__6es7512-1sk01-0ab0_
siemens
simatic_s7-1500_cpu_1512sp_f-1_pn__6es7512-1sm03-0ab0_
siemens simatic_s7-1500_cpu_1513-1_pn
siemens
simatic_s7-1500_cpu_1513-1_pn__6es7513-1al01-0ab0_
siemens
simatic_s7-1500_cpu_1513-1_pn__6es7513-1al02-0ab0_
siemens
simatic_s7-1500_cpu_1513-1_pn__6es7513-1am03-0ab0_
siemens simatic_s7-1500_cpu_1513f-1_pn
siemens
simatic_s7-1500_cpu_1513f-1_pn__6es7513-1fl01-0ab0_
siemens
simatic_s7-1500_cpu_1513f-1_pn__6es7513-1fl02-0ab0_
siemens
simatic_s7-1500_cpu_1513f-1_pn__6es7513-1fm03-0ab0_
siemens simatic_s7-1500_cpu_1513pro-2_pn
siemens
simatic_s7-1500_cpu_1513pro-2_pn__6es7513-2pm03-0ab0_
siemens simatic_s7-1500_cpu_1513pro_f-2_pn
siemens simatic_s7-1500_cpu_1513pro_f-2_pn__6es7513-
2gm03-0ab0_
siemens simatic_s7-1500_cpu_1514sp-2_pn
siemens
simatic_s7-1500_cpu_1514sp-2_pn__6es7514-2dn03-0ab0_
siemens simatic_s7-1500_cpu_1514sp_f-2_pn
siemens
simatic_s7-1500_cpu_1514sp_f-2_pn__6es7514-2sn03-0ab0_
siemens simatic_s7-1500_cpu_1514spt-2_pn
siemens
simatic_s7-1500_cpu_1514spt-2_pn__6es7514-2vn03-0ab0_
siemens simatic_s7-1500_cpu_1514spt_f-2_pn
siemens simatic_s7-1500_cpu_1514spt_f-2_pn__6es7514-
2wn03-0ab0_
siemens simatic_s7-1500_cpu_1515-2_pn
siemens
simatic_s7-1500_cpu_1515-2_pn__6es7515-2am01-0ab0_
siemens
simatic_s7-1500_cpu_1515-2_pn__6es7515-2am02-0ab0_
siemens
simatic_s7-1500_cpu_1515-2_pn__6es7515-2an03-0ab0_
siemens simatic_s7-1500_cpu_1515f-2_pn
siemens
simatic_s7-1500_cpu_1515f-2_pn__6es7515-2fm01-0ab0_
siemens
simatic_s7-1500_cpu_1515f-2_pn__6es7515-2fm02-0ab0_
siemens
simatic_s7-1500_cpu_1515f-2_pn__6es7515-2fn03-0ab0_
siemens simatic_s7-1500_cpu_1515t-2_pn
siemens
simatic_s7-1500_cpu_1515t-2_pn__6es7515-2tm01-0ab0_
siemens
simatic_s7-1500_cpu_1515t-2_pn__6es7515-2tn03-0ab0_
siemens simatic_s7-1500_cpu_1515tf-2_pn
siemens
simatic_s7-1500_cpu_1515tf-2_pn__6es7515-2um01-0ab0_
siemens
simatic_s7-1500_cpu_1515tf-2_pn__6es7515-2un03-0ab0_
siemens simatic_s7-1500_cpu_1516-3_pn
siemens simatic_s7-1500_cpu_1516-3_pn_dp
siemens
simatic_s7-1500_cpu_1516-3_pn_dp__6es7516-3an01-0ab0_
siemens
simatic_s7-1500_cpu_1516-3_pn_dp__6es7516-3an02-0ab0_
siemens
simatic_s7-1500_cpu_1516-3_pn_dp__6es7516-3ap03-0ab0_
siemens simatic_s7-1500_cpu_1516f-3_pn
siemens simatic_s7-1500_cpu_1516f-3_pn_dp
siemens
simatic_s7-1500_cpu_1516f-3_pn_dp__6es7516-3fn01-0ab0_
siemens
simatic_s7-1500_cpu_1516f-3_pn_dp__6es7516-3fn02-0ab0_
siemens
simatic_s7-1500_cpu_1516f-3_pn_dp__6es7516-3fp03-0ab0_
siemens simatic_s7-1500_cpu_1516pro-2_pn
siemens
simatic_s7-1500_cpu_1516pro-2_pn__6es7516-2pp03-0ab0_
siemens simatic_s7-1500_cpu_1516pro_f-2_pn
siemens simatic_s7-1500_cpu_1516pro_f-2_pn__6es7516-
2gp03-0ab0_
siemens simatic_s7-1500_cpu_1516t-3_pn
siemens simatic_s7-1500_cpu_1516t-3_pn_dp
siemens
simatic_s7-1500_cpu_1516t-3_pn_dp__6es7516-3tn00-0ab0_
siemens simatic_s7-1500_cpu_1516tf-3_pn
siemens simatic_s7-1500_cpu_1516tf-3_pn_dp
siemens simatic_s7-1500_cpu_1516tf-3_pn_dp__6es7516-
3un00-0ab0_
siemens simatic_s7-1500_cpu_1517-3_pn
siemens simatic_s7-1500_cpu_1517-3_pn_dp
siemens
simatic_s7-1500_cpu_1517-3_pn_dp__6es7517-3ap00-0ab0_
siemens simatic_s7-1500_cpu_1517f-3_pn
siemens simatic_s7-1500_cpu_1517f-3_pn_dp
siemens
simatic_s7-1500_cpu_1517f-3_pn_dp__6es7517-3fp00-0ab0_
siemens
simatic_s7-1500_cpu_1517f-3_pn_dp__6es7517-3fp01-0ab0_
siemens simatic_s7-1500_cpu_1517t-3_pn
siemens simatic_s7-1500_cpu_1517t-3_pn_dp
siemens
simatic_s7-1500_cpu_1517t-3_pn_dp__6es7517-3tp00-0ab0_
siemens simatic_s7-1500_cpu_1517tf-3_pn
siemens simatic_s7-1500_cpu_1517tf-3_pn_dp
siemens simatic_s7-1500_cpu_1517tf-3_pn_dp__6es7517-
3up00-0ab0_
siemens simatic_s7-1500_cpu_1518-4_pn
siemens simatic_s7-1500_cpu_1518-4_pn_dp
siemens
simatic_s7-1500_cpu_1518-4_pn_dp__6es7518-4ap00-0ab0_
siemens simatic_s7-1500_cpu_1518-4_pn_dp_mfp
siemens simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-
4ax00-1ab0_
siemens simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-
4ax00-1ac0_
siemens simatic_s7-1500_cpu_1518f-4_pn
siemens simatic_s7-1500_cpu_1518f-4_pn_dp
siemens
simatic_s7-1500_cpu_1518f-4_pn_dp__6es7518-4fp00-0ab0_
siemens simatic_s7-1500_cpu_1518f-4_pn_dp_mfp
siemens simatic_s7-1500_cpu_1518f-
4_pn_dp_mfp__6es7518-4fx00-1ab0_
siemens simatic_s7-1500_cpu_1518f-
4_pn_dp_mfp__6es7518-4fx00-1ac0_
siemens simatic_s7-1500_cpu_1518t-4_pn
siemens simatic_s7-1500_cpu_1518t-4_pn_dp
siemens
simatic_s7-1500_cpu_1518t-4_pn_dp__6es7518-4tp00-0ab0_
siemens simatic_s7-1500_cpu_1518tf-4_pn
siemens simatic_s7-1500_cpu_1518tf-4_pn_dp
siemens simatic_s7-1500_cpu_1518tf-4_pn_dp__6es7518-
4up00-0ab0_
siemens simatic_s7-1500_cpu_s7-1518-4_pn
siemens simatic_s7-1500_cpu_s7-1518-4_pn_dp_odk
siemens simatic_s7-1500_cpu_s7-1518-
4_pn_dp_odk__6es7518-4ap00-3ab0_
siemens simatic_s7-1500_cpu_s7-1518f-4_pn
siemens simatic_s7-1500_cpu_s7-1518f-4_pn_dp_odk
siemens simatic_s7-1500_cpu_s7-1518f-
4_pn_dp_odk__6es7518-4fp00-3ab0_
siemens simatic_s7-1500_et_200pro__cpu_1513pro-2_pn
siemens simatic_s7-1500_et_200pro__cpu_1513pro-
2_pn__6es7513-2pl00-0ab0_
siemens simatic_s7-1500_et_200pro__cpu_1513pro_f-2_pn
siemens simatic_s7-1500_et_200pro__cpu_1513pro_f-
2_pn__6es7513-2gl00-0ab0_
siemens simatic_s7-1500_et_200pro__cpu_1516pro-2_pn
siemens simatic_s7-1500_et_200pro__cpu_1516pro-
2_pn__6es7516-2pn00-0ab0_
siemens simatic_s7-1500_et_200pro__cpu_1516pro_f-2_pn
siemens simatic_s7-1500_et_200pro__cpu_1516pro_f-
2_pn__6es7516-2gn00-0ab0_
siemens simatic_s7-1500_et_200pro_cpu_1513pro-2_pn
siemens simatic_s7-1500_et_200pro_cpu_1513pro_f-2_pn
siemens simatic_s7-1500_et_200pro_cpu_1516pro-2_pn
siemens simatic_s7-1500_et_200pro_cpu_1516pro_f-2_pn
siemens
simatic_s7-1500_software_controller_cpu_1507s_f_v2
siemens
simatic_s7-1500_software_controller_cpu_1507s_f_v3
siemens
simatic_s7-1500_software_controller_cpu_1507s_v2
siemens
simatic_s7-1500_software_controller_cpu_1507s_v3
siemens
simatic_s7-1500_software_controller_cpu_1508s_f_v2
siemens
simatic_s7-1500_software_controller_cpu_1508s_f_v3
siemens
simatic_s7-1500_software_controller_cpu_1508s_t_v3
siemens
simatic_s7-1500_software_controller_cpu_1508s_tf_v3
siemens
simatic_s7-1500_software_controller_cpu_1508s_v2
siemens
simatic_s7-1500_software_controller_cpu_1508s_v3
siemens simatic_s7-1500_software_controller_l
siemens simatic_s7-1500_software_controller_linux_v2
siemens simatic_s7-1500_software_controller_linux_v3
siemens simatic_s7-1500_software_controller_v2
siemens simatic_s7-1500_software_controller_v3
siemens simatic_s7-plcsim_advanced
siemens simcenter_nastran_2306
siemens simcenter_nastran_2312
siemens simcenter_nastran_2406
siemens sinec_security_monitor
siemens siplus_et_200sp_cpu_1510sp-1_pn
siemens
siplus_et_200sp_cpu_1510sp-1_pn__6ag1510-1dj01-2ab0_
siemens
siplus_et_200sp_cpu_1510sp-1_pn__6ag1510-1dj01-7ab0_
siemens siplus_et_200sp_cpu_1510sp-1_pn_rail
siemens siplus_et_200sp_cpu_1510sp-1_pn_rail__6ag2510-
1dj01-1ab0_
siemens siplus_et_200sp_cpu_1510sp-1_pn_rail__6ag2510-
1dj01-4ab0_
siemens siplus_et_200sp_cpu_1510sp_f-1_pn
siemens
siplus_et_200sp_cpu_1510sp_f-1_pn__6ag1510-1sj01-2ab0_
siemens siplus_et_200sp_cpu_1510sp_f-1_pn_rail
siemens siplus_et_200sp_cpu_1510sp_f-
1_pn_rail__6ag2510-1sj01-1ab0_
siemens siplus_et_200sp_cpu_1512sp-1_pn
siemens
siplus_et_200sp_cpu_1512sp-1_pn__6ag1512-1dk01-2ab0_
siemens
siplus_et_200sp_cpu_1512sp-1_pn__6ag1512-1dk01-7ab0_
siemens siplus_et_200sp_cpu_1512sp-1_pn_rail
siemens siplus_et_200sp_cpu_1512sp-1_pn_rail__6ag2512-
1dk01-1ab0_
siemens siplus_et_200sp_cpu_1512sp-1_pn_rail__6ag2512-
1dk01-4ab0_
siemens siplus_et_200sp_cpu_1512sp_f-1_pn
siemens
siplus_et_200sp_cpu_1512sp_f-1_pn__6ag1512-1sk01-2ab0_
siemens
siplus_et_200sp_cpu_1512sp_f-1_pn__6ag1512-1sk01-7ab0_
siemens siplus_et_200sp_cpu_1512sp_f-1_pn_rail
siemens siplus_et_200sp_cpu_1512sp_f-
1_pn_rail__6ag2512-1sk01-1ab0_
siemens siplus_et_200sp_cpu_1512sp_f-
1_pn_rail__6ag2512-1sk01-4ab0_
siemens siplus_s7-1500_cpu_1511-1_pn
siemens
siplus_s7-1500_cpu_1511-1_pn__6ag1511-1ak01-2ab0_
siemens
siplus_s7-1500_cpu_1511-1_pn__6ag1511-1ak01-7ab0_
siemens
siplus_s7-1500_cpu_1511-1_pn__6ag1511-1ak02-2ab0_
siemens
siplus_s7-1500_cpu_1511-1_pn__6ag1511-1ak02-7ab0_
siemens siplus_s7-1500_cpu_1511-1_pn_t1_rail
siemens siplus_s7-1500_cpu_1511-1_pn_t1_rail__6ag2511-
1ak01-1ab0_
siemens siplus_s7-1500_cpu_1511-1_pn_t1_rail__6ag2511-
1ak02-1ab0_
siemens siplus_s7-1500_cpu_1511-1_pn_tx_rail
siemens siplus_s7-1500_cpu_1511-1_pn_tx_rail__6ag2511-
1ak01-4ab0_
siemens siplus_s7-1500_cpu_1511-1_pn_tx_rail__6ag2511-
1ak02-4ab0_
siemens siplus_s7-1500_cpu_1511f-1_pn
siemens
siplus_s7-1500_cpu_1511f-1_pn__6ag1511-1fk01-2ab0_
siemens
siplus_s7-1500_cpu_1511f-1_pn__6ag1511-1fk02-2ab0_
siemens siplus_s7-1500_cpu_1513-1_pn
siemens
siplus_s7-1500_cpu_1513-1_pn__6ag1513-1al01-2ab0_
siemens
siplus_s7-1500_cpu_1513-1_pn__6ag1513-1al01-7ab0_
siemens
siplus_s7-1500_cpu_1513-1_pn__6ag1513-1al02-2ab0_
siemens
siplus_s7-1500_cpu_1513-1_pn__6ag1513-1al02-7ab0_
siemens siplus_s7-1500_cpu_1513f-1_pn
siemens
siplus_s7-1500_cpu_1513f-1_pn__6ag1513-1fl01-2ab0_
siemens
siplus_s7-1500_cpu_1513f-1_pn__6ag1513-1fl02-2ab0_
siemens siplus_s7-1500_cpu_1515f-2_pn
siemens
siplus_s7-1500_cpu_1515f-2_pn__6ag1515-2fm01-2ab0_
siemens
siplus_s7-1500_cpu_1515f-2_pn__6ag1515-2fm02-2ab0_
siemens siplus_s7-1500_cpu_1515f-2_pn_rail
siemens siplus_s7-1500_cpu_1515f-2_pn_rail__6ag2515-
2fm02-4ab0_
siemens siplus_s7-1500_cpu_1515f-2_pn_t2_rail
siemens siplus_s7-1500_cpu_1515f-
2_pn_t2_rail__6ag2515-2fm01-2ab0_
siemens siplus_s7-1500_cpu_1515r-2_pn_tx_rail
siemens siplus_s7-1500_cpu_1515r-
2_pn_tx_rail__6ag2515-2rm00-4ab0_
siemens siplus_s7-1500_cpu_1516-3_pn
siemens siplus_s7-1500_cpu_1516-3_pn_dp
siemens
siplus_s7-1500_cpu_1516-3_pn_dp__6ag1516-3an01-2ab0_
siemens
siplus_s7-1500_cpu_1516-3_pn_dp__6ag1516-3an01-7ab0_
siemens
siplus_s7-1500_cpu_1516-3_pn_dp__6ag1516-3an02-2ab0_
siemens
siplus_s7-1500_cpu_1516-3_pn_dp__6ag1516-3an02-7ab0_
siemens siplus_s7-1500_cpu_1516-3_pn_dp_rail
siemens siplus_s7-1500_cpu_1516-3_pn_dp_rail__6ag2516-
3an02-4ab0_
siemens siplus_s7-1500_cpu_1516-3_pn_dp_tx_rail
siemens siplus_s7-1500_cpu_1516-
3_pn_dp_tx_rail__6ag2516-3an01-4ab0_
siemens siplus_s7-1500_cpu_1516f-3_pn
siemens siplus_s7-1500_cpu_1516f-3_pn_dp
siemens
siplus_s7-1500_cpu_1516f-3_pn_dp__6ag1516-3fn01-2ab0_
siemens
siplus_s7-1500_cpu_1516f-3_pn_dp__6ag1516-3fn02-2ab0_
siemens siplus_s7-1500_cpu_1516f-3_pn_dp_rail
siemens siplus_s7-1500_cpu_1516f-
3_pn_dp_rail__6ag2516-3fn02-2ab0_
siemens siplus_s7-1500_cpu_1516f-
3_pn_dp_rail__6ag2516-3fn02-4ab0_
siemens siplus_s7-1500_cpu_1518-4_pn
siemens siplus_s7-1500_cpu_1518-4_pn_dp
siemens
siplus_s7-1500_cpu_1518-4_pn_dp__6ag1518-4ap00-4ab0_
siemens siplus_s7-1500_cpu_1518-4_pn_dp_mfp
siemens siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-
4ax00-4ac0_
siemens siplus_s7-1500_cpu_1518f-4_pn
siemens siplus_s7-1500_cpu_1518f-4_pn_dp
siemens
siplus_s7-1500_cpu_1518f-4_pn_dp__6ag1518-4fp00-4ab0_
siemens teamcenter_visualization_v14.2
siemens teamcenter_visualization_v14.3
siemens teamcenter_visualization_v2312
siemens teamcenter_visualization_v2406
siemens tecnomatix_plant_simulation_v2302
siemens tecnomatix_plant_simulation_v2404
Versie(s) :
Platform(s) : siemens jt_open
Beschrijving
Siemens heeft kwetsbaarheden verholpen in diverse producten als
Questa/ModelSIM, RUGGEDCOM, SENTRON, SIMATIC, SINEC, Tecnomatix en
Teamcenter.
De kwetsbaarheden stellen een kwaadwillende mogelijk in staat
aanvallen uit te voeren die kunnen leiden tot de volgende categorieën
schade:
- Denial-of-Service (DoS)
- Manipulatie van gegevens
- Omzeilen van een beveiligingsmaatregel
- Omzeilen van authenticatie
- (Remote) code execution (Administrator/Root rechten)
- (Remote) code execution (Gebruikersrechten)
- Toegang tot systeemgegevens
- Verhoogde gebruikersrechten
De kwaadwillende heeft hiervoor toegang nodig tot de
productieomgeving. Het is goed gebruik een dergelijke omgeving niet
publiek toegankelijk te hebben.
Mogelijke oplossingen
Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te
verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn,
heeft Siemens mitigerende maatregelen gepubliceerd om de risico's
zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor
meer informatie.
Referenties:
Reference - ncscclear
https://cert-portal.siemens.com/productcert/pdf/ssa-054046.pdf
Reference - ncscclear
https://cert-portal.siemens.com/productcert/pdf/ssa-254396.pdf
Reference - ncscclear
https://cert-portal.siemens.com/productcert/pdf/ssa-340240.pdf
Reference - ncscclear
https://cert-portal.siemens.com/productcert/pdf/ssa-368868.pdf
Reference - ncscclear
https://cert-portal.siemens.com/productcert/pdf/ssa-426509.pdf
Reference - ncscclear
https://cert-portal.siemens.com/productcert/pdf/ssa-430425.pdf
Reference - ncscclear
https://cert-portal.siemens.com/productcert/pdf/ssa-583523.pdf
Reference - ncscclear
https://cert-portal.siemens.com/productcert/pdf/ssa-626178.pdf
Reference - ncscclear
https://cert-portal.siemens.com/productcert/pdf/ssa-850560.pdf
Reference - ncscclear
https://cert-portal.siemens.com/productcert/pdf/ssa-852501.pdf
Reference - ncscclear
https://cert-portal.siemens.com/productcert/pdf/ssa-876787.pdf
Reference - ncscclear
https://cert-portal.siemens.com/productcert/pdf/ssa-959281.pdf
Vrijwaringsverklaring
Door gebruik van deze security advisory gaat u akkoord met de
navolgende voorwaarden. Ondanks dat het NCSC de grootst mogelijke
zorg heeft betracht bij de samenstelling van dit beveiligingsadvies,
kan het NCSC niet instaan voor de volledigheid, juistheid of
(voortdurende) actualiteit van dit beveiligingsadvies. De informatie
in dit beveiligingsadvies is uitsluitend bedoeld als algemene
informatie voor professionele partijen. Aan de informatie in dit
beveiligingsadvies kunnen geen rechten worden ontleend. Het NCSC
en de Staat zijn niet aansprakelijk voor enige schade ten gevolge
van het gebruik of de onmogelijkheid van het gebruik van dit
beveiligingsadvies, waaronder begrepen schade ten gevolge van de
onjuistheid of onvolledigheid van de informatie in dit
beveiligingsadvies. Op dit beveiligingsadvies is Nederlands recht
van toepassing. Alle geschillen in verband met en/of voortvloeiend
uit dit beveiligingsadvies zullen worden voorgelegd aan de exclusief
bevoegde rechter te Den Haag. Deze rechtskeuze geldt tevens voor de
voorzieningenrechter in kort geding.
-----BEGIN PGP SIGNATURE-----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=DmUQ
-----END PGP SIGNATURE-----
