CNVD-2022-75547

Vulnerability from cnvd - Published: 2022-11-09
VLAI
Title
多款Siemens产品跨站请求伪造漏洞
Description
SIMATIC Drive Controllers是为生产机器的自动化而设计的,结合了SIMATIC S7-1500 CPU和SINAMICS S120驱动控制的功能。SIMATIC PC Station是一个软件组件,用于管理SIMATIC软件产品和PC上的接口。SIMATIC S7-1200 CPU和SIMATIC S7-1500 CPU已设计用于工业环境中的离散和连续控制,如制造业,食品和饮料,以及全球化工行业。SIMATIC S7-1500 Software Controller是一款针对基于pc的自动化解决方案的SIMATIC软件控制器。SIMATIC S7-300 controllers和SIMATIC S7-400 controllers已设计用于工业环境中的离散和连续控制,如制造业,食品和饮料,以及全球化工行业。SIMATIC S7-PLCSIM Advanced模拟S7-1200, S7-1500和其他一些PLC衍生产品。包括模拟plc的完全网络访问,甚至在虚拟环境中。SIMATIC WinAC RTX是一款基于pc的自动化解决方案的SIMATIC软件控制器。SIMATIC WinCC Runtime Advanced是一个可视化运行时平台,用于机器和工厂的操作员控制和监控。SINUMERIK ONE是一款数字原生数控系统,集成SIMATIC S7-1500 CPU,用于自动化。SIPLUS extreme products是为在极端条件下可靠运行而设计的,基于SIMATIC, LOGO!、SITOP、SINAMICS、SIMOTION、SCALANCE或其他设备。SIPLUS设备使用与它们所基于的产品相同的固件。 多款Siemens产品存在跨站请求伪造漏洞,经过身份验证的远程攻击者可利用该漏洞跟踪其他用户的活动。
Severity
Patch Name
多款Siemens产品跨站请求伪造漏洞的补丁
Patch Description
SIMATIC Drive Controllers是为生产机器的自动化而设计的,结合了SIMATIC S7-1500 CPU和SINAMICS S120驱动控制的功能。SIMATIC PC Station是一个软件组件,用于管理SIMATIC软件产品和PC上的接口。SIMATIC S7-1200 CPU和SIMATIC S7-1500 CPU已设计用于工业环境中的离散和连续控制,如制造业,食品和饮料,以及全球化工行业。SIMATIC S7-1500 Software Controller是一款针对基于pc的自动化解决方案的SIMATIC软件控制器。SIMATIC S7-300 controllers和SIMATIC S7-400 controllers已设计用于工业环境中的离散和连续控制,如制造业,食品和饮料,以及全球化工行业。SIMATIC S7-PLCSIM Advanced模拟S7-1200, S7-1500和其他一些PLC衍生产品。包括模拟plc的完全网络访问,甚至在虚拟环境中。SIMATIC WinAC RTX是一款基于pc的自动化解决方案的SIMATIC软件控制器。SIMATIC WinCC Runtime Advanced是一个可视化运行时平台,用于机器和工厂的操作员控制和监控。SINUMERIK ONE是一款数字原生数控系统,集成SIMATIC S7-1500 CPU,用于自动化。SIPLUS extreme products是为在极端条件下可靠运行而设计的,基于SIMATIC, LOGO!、SITOP、SINAMICS、SIMOTION、SCALANCE或其他设备。SIPLUS设备使用与它们所基于的产品相同的固件。 多款Siemens产品存在跨站请求伪造漏洞,经过身份验证的远程攻击者可利用该漏洞跟踪其他用户的活动。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。
Formal description

厂商已发布了漏洞修复程序,请及时关注更新: https://cert-portal.siemens.com/productcert/html/ssa-478960.html

Reference
https://cert-portal.siemens.com/productcert/html/ssa-478960.html
Impacted products
Name
['Siemens SIMATIC S7-1500 Software Controller', 'Siemens SIMATIC WinCC Runtime Advanced', 'Siemens SIMATIC S7-PLCSIM Advanced', 'Siemens SIMATIC Drive Controller family', 'Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants)', 'Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)', 'Siemens SINUMERIK ONE', 'Siemens SIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0) <3.2.19', 'Siemens SIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0) <3.2.19', 'Siemens SIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) <3.2.19', 'Siemens SIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0) <3.2.19', 'Siemens SIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0) <3.2.19', 'Siemens SIMATIC PC Station >=2.1', 'Siemens SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0) <3.3.19', 'Siemens SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0) <3.2.19', 'Siemens SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0) <3.2.19', 'Siemens SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0) <3.2.19', 'Siemens SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0) <3.2.19', 'Siemens SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0) <3.2.19', 'Siemens SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0) <3.2.19', 'Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0) <3.2.19', 'Siemens SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0) <3.2.19', 'Siemens SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0) <3.2.19', 'Siemens SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants)', 'Siemens SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)', 'Siemens SIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0) <3.2.19', 'Siemens SIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0) <3.2.19', 'Siemens SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0) <3.3.19', 'Siemens SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0) <3.2.19', 'Siemens SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0) <3.2.19', 'Siemens SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0) <3.2.19', 'Siemens SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0) <3.2.19']
Show details on source website

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2022-30694"
    }
  },
  "description": "SIMATIC Drive Controllers\u662f\u4e3a\u751f\u4ea7\u673a\u5668\u7684\u81ea\u52a8\u5316\u800c\u8bbe\u8ba1\u7684\uff0c\u7ed3\u5408\u4e86SIMATIC S7-1500 CPU\u548cSINAMICS S120\u9a71\u52a8\u63a7\u5236\u7684\u529f\u80fd\u3002SIMATIC PC Station\u662f\u4e00\u4e2a\u8f6f\u4ef6\u7ec4\u4ef6\uff0c\u7528\u4e8e\u7ba1\u7406SIMATIC\u8f6f\u4ef6\u4ea7\u54c1\u548cPC\u4e0a\u7684\u63a5\u53e3\u3002SIMATIC S7-1200 CPU\u548cSIMATIC S7-1500 CPU\u5df2\u8bbe\u8ba1\u7528\u4e8e\u5de5\u4e1a\u73af\u5883\u4e2d\u7684\u79bb\u6563\u548c\u8fde\u7eed\u63a7\u5236\uff0c\u5982\u5236\u9020\u4e1a\uff0c\u98df\u54c1\u548c\u996e\u6599\uff0c\u4ee5\u53ca\u5168\u7403\u5316\u5de5\u884c\u4e1a\u3002SIMATIC S7-1500 Software Controller\u662f\u4e00\u6b3e\u9488\u5bf9\u57fa\u4e8epc\u7684\u81ea\u52a8\u5316\u89e3\u51b3\u65b9\u6848\u7684SIMATIC\u8f6f\u4ef6\u63a7\u5236\u5668\u3002SIMATIC S7-300 controllers\u548cSIMATIC S7-400 controllers\u5df2\u8bbe\u8ba1\u7528\u4e8e\u5de5\u4e1a\u73af\u5883\u4e2d\u7684\u79bb\u6563\u548c\u8fde\u7eed\u63a7\u5236\uff0c\u5982\u5236\u9020\u4e1a\uff0c\u98df\u54c1\u548c\u996e\u6599\uff0c\u4ee5\u53ca\u5168\u7403\u5316\u5de5\u884c\u4e1a\u3002SIMATIC S7-PLCSIM Advanced\u6a21\u62dfS7-1200, S7-1500\u548c\u5176\u4ed6\u4e00\u4e9bPLC\u884d\u751f\u4ea7\u54c1\u3002\u5305\u62ec\u6a21\u62dfplc\u7684\u5b8c\u5168\u7f51\u7edc\u8bbf\u95ee\uff0c\u751a\u81f3\u5728\u865a\u62df\u73af\u5883\u4e2d\u3002SIMATIC WinAC RTX\u662f\u4e00\u6b3e\u57fa\u4e8epc\u7684\u81ea\u52a8\u5316\u89e3\u51b3\u65b9\u6848\u7684SIMATIC\u8f6f\u4ef6\u63a7\u5236\u5668\u3002SIMATIC WinCC Runtime Advanced\u662f\u4e00\u4e2a\u53ef\u89c6\u5316\u8fd0\u884c\u65f6\u5e73\u53f0\uff0c\u7528\u4e8e\u673a\u5668\u548c\u5de5\u5382\u7684\u64cd\u4f5c\u5458\u63a7\u5236\u548c\u76d1\u63a7\u3002SINUMERIK ONE\u662f\u4e00\u6b3e\u6570\u5b57\u539f\u751f\u6570\u63a7\u7cfb\u7edf\uff0c\u96c6\u6210SIMATIC S7-1500 CPU\uff0c\u7528\u4e8e\u81ea\u52a8\u5316\u3002SIPLUS extreme products\u662f\u4e3a\u5728\u6781\u7aef\u6761\u4ef6\u4e0b\u53ef\u9760\u8fd0\u884c\u800c\u8bbe\u8ba1\u7684\uff0c\u57fa\u4e8eSIMATIC, LOGO!\u3001SITOP\u3001SINAMICS\u3001SIMOTION\u3001SCALANCE\u6216\u5176\u4ed6\u8bbe\u5907\u3002SIPLUS\u8bbe\u5907\u4f7f\u7528\u4e0e\u5b83\u4eec\u6240\u57fa\u4e8e\u7684\u4ea7\u54c1\u76f8\u540c\u7684\u56fa\u4ef6\u3002\n\n\u591a\u6b3eSiemens\u4ea7\u54c1\u5b58\u5728\u8de8\u7ad9\u8bf7\u6c42\u4f2a\u9020\u6f0f\u6d1e\uff0c\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8ddf\u8e2a\u5176\u4ed6\u7528\u6237\u7684\u6d3b\u52a8\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://cert-portal.siemens.com/productcert/html/ssa-478960.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-75547",
  "openTime": "2022-11-09",
  "patchDescription": "SIMATIC Drive Controllers\u662f\u4e3a\u751f\u4ea7\u673a\u5668\u7684\u81ea\u52a8\u5316\u800c\u8bbe\u8ba1\u7684\uff0c\u7ed3\u5408\u4e86SIMATIC S7-1500 CPU\u548cSINAMICS S120\u9a71\u52a8\u63a7\u5236\u7684\u529f\u80fd\u3002SIMATIC PC Station\u662f\u4e00\u4e2a\u8f6f\u4ef6\u7ec4\u4ef6\uff0c\u7528\u4e8e\u7ba1\u7406SIMATIC\u8f6f\u4ef6\u4ea7\u54c1\u548cPC\u4e0a\u7684\u63a5\u53e3\u3002SIMATIC S7-1200 CPU\u548cSIMATIC S7-1500 CPU\u5df2\u8bbe\u8ba1\u7528\u4e8e\u5de5\u4e1a\u73af\u5883\u4e2d\u7684\u79bb\u6563\u548c\u8fde\u7eed\u63a7\u5236\uff0c\u5982\u5236\u9020\u4e1a\uff0c\u98df\u54c1\u548c\u996e\u6599\uff0c\u4ee5\u53ca\u5168\u7403\u5316\u5de5\u884c\u4e1a\u3002SIMATIC S7-1500 Software Controller\u662f\u4e00\u6b3e\u9488\u5bf9\u57fa\u4e8epc\u7684\u81ea\u52a8\u5316\u89e3\u51b3\u65b9\u6848\u7684SIMATIC\u8f6f\u4ef6\u63a7\u5236\u5668\u3002SIMATIC S7-300 controllers\u548cSIMATIC S7-400 controllers\u5df2\u8bbe\u8ba1\u7528\u4e8e\u5de5\u4e1a\u73af\u5883\u4e2d\u7684\u79bb\u6563\u548c\u8fde\u7eed\u63a7\u5236\uff0c\u5982\u5236\u9020\u4e1a\uff0c\u98df\u54c1\u548c\u996e\u6599\uff0c\u4ee5\u53ca\u5168\u7403\u5316\u5de5\u884c\u4e1a\u3002SIMATIC S7-PLCSIM Advanced\u6a21\u62dfS7-1200, S7-1500\u548c\u5176\u4ed6\u4e00\u4e9bPLC\u884d\u751f\u4ea7\u54c1\u3002\u5305\u62ec\u6a21\u62dfplc\u7684\u5b8c\u5168\u7f51\u7edc\u8bbf\u95ee\uff0c\u751a\u81f3\u5728\u865a\u62df\u73af\u5883\u4e2d\u3002SIMATIC WinAC RTX\u662f\u4e00\u6b3e\u57fa\u4e8epc\u7684\u81ea\u52a8\u5316\u89e3\u51b3\u65b9\u6848\u7684SIMATIC\u8f6f\u4ef6\u63a7\u5236\u5668\u3002SIMATIC WinCC Runtime Advanced\u662f\u4e00\u4e2a\u53ef\u89c6\u5316\u8fd0\u884c\u65f6\u5e73\u53f0\uff0c\u7528\u4e8e\u673a\u5668\u548c\u5de5\u5382\u7684\u64cd\u4f5c\u5458\u63a7\u5236\u548c\u76d1\u63a7\u3002SINUMERIK ONE\u662f\u4e00\u6b3e\u6570\u5b57\u539f\u751f\u6570\u63a7\u7cfb\u7edf\uff0c\u96c6\u6210SIMATIC S7-1500 CPU\uff0c\u7528\u4e8e\u81ea\u52a8\u5316\u3002SIPLUS extreme products\u662f\u4e3a\u5728\u6781\u7aef\u6761\u4ef6\u4e0b\u53ef\u9760\u8fd0\u884c\u800c\u8bbe\u8ba1\u7684\uff0c\u57fa\u4e8eSIMATIC, LOGO!\u3001SITOP\u3001SINAMICS\u3001SIMOTION\u3001SCALANCE\u6216\u5176\u4ed6\u8bbe\u5907\u3002SIPLUS\u8bbe\u5907\u4f7f\u7528\u4e0e\u5b83\u4eec\u6240\u57fa\u4e8e\u7684\u4ea7\u54c1\u76f8\u540c\u7684\u56fa\u4ef6\u3002\r\n\r\n\u591a\u6b3eSiemens\u4ea7\u54c1\u5b58\u5728\u8de8\u7ad9\u8bf7\u6c42\u4f2a\u9020\u6f0f\u6d1e\uff0c\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8ddf\u8e2a\u5176\u4ed6\u7528\u6237\u7684\u6d3b\u52a8\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eSiemens\u4ea7\u54c1\u8de8\u7ad9\u8bf7\u6c42\u4f2a\u9020\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens SIMATIC S7-1500 Software Controller",
      "Siemens SIMATIC WinCC Runtime Advanced",
      "Siemens SIMATIC S7-PLCSIM Advanced",
      "Siemens SIMATIC Drive Controller family",
      "Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants)",
      "Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)",
      "Siemens SINUMERIK ONE",
      "Siemens SIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0) \u003c3.2.19",
      "Siemens SIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0) \u003c3.2.19",
      "Siemens SIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) \u003c3.2.19",
      "Siemens SIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0) \u003c3.2.19",
      "Siemens SIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0) \u003c3.2.19",
      "Siemens SIMATIC PC Station \u003e=2.1",
      "Siemens SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0) \u003c3.3.19",
      "Siemens SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0) \u003c3.2.19",
      "Siemens SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0) \u003c3.2.19",
      "Siemens SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0) \u003c3.2.19",
      "Siemens SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0) \u003c3.2.19",
      "Siemens SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0) \u003c3.2.19",
      "Siemens SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0) \u003c3.2.19",
      "Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0) \u003c3.2.19",
      "Siemens SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0) \u003c3.2.19",
      "Siemens SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0) \u003c3.2.19",
      "Siemens SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants)",
      "Siemens SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)",
      "Siemens SIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0) \u003c3.2.19",
      "Siemens SIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0) \u003c3.2.19",
      "Siemens SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0) \u003c3.3.19",
      "Siemens SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0) \u003c3.2.19",
      "Siemens SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0) \u003c3.2.19",
      "Siemens SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0) \u003c3.2.19",
      "Siemens SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0) \u003c3.2.19"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-478960.html",
  "serverity": "\u9ad8",
  "submitTime": "2022-11-09",
  "title": "\u591a\u6b3eSiemens\u4ea7\u54c1\u8de8\u7ad9\u8bf7\u6c42\u4f2a\u9020\u6f0f\u6d1e"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…