CNVD-2024-40007

Vulnerability from cnvd - Published: 2024-10-10
VLAI
Title
Siemens多款产品URL重定向漏洞
Description
SIMATIC Drive Controllers是为生产机器的自动化而设计的,结合了SIMATIC S7-1500 CPU和SINAMICS S120驱动控制的功能。SIMATIC ET 200SP Open Controller是SIMATIC S7-1500控制器的基于pc的版本,包括可选的可视化以及紧凑设备中的中央I/o。SIMATIC S7-1200 CPU和SIMATIC S7-1500 CPU都是专为全球制造业,食品和饮料以及化学工业等工业环境中的离散和连续控制而设计。SIMATIC S7-1500 MFP CPUs提供了标准S7-1500 cpu的功能,可以在cpu运行时中运行C/c++代码来执行自己在C/c++中实现的函数/算法。SIMATIC S7-1500 Software Controller是一款SIMATIC软件控制器,适用于基于pc的自动化解决方案。SIMATIC S7-PLCSIM Advanced模拟S7-1200,S7-1500和其他一些PLC衍生产品。 Siemens多款产品存在URL重定向漏洞,攻击者可利用该漏洞让服务器将合法用户重定向到攻击者选择的URL。
Severity
Patch Name
Siemens多款产品URL重定向漏洞的补丁
Patch Description
SIMATIC Drive Controllers是为生产机器的自动化而设计的,结合了SIMATIC S7-1500 CPU和SINAMICS S120驱动控制的功能。SIMATIC ET 200SP Open Controller是SIMATIC S7-1500控制器的基于pc的版本,包括可选的可视化以及紧凑设备中的中央I/o。SIMATIC S7-1200 CPU和SIMATIC S7-1500 CPU都是专为全球制造业,食品和饮料以及化学工业等工业环境中的离散和连续控制而设计。SIMATIC S7-1500 MFP CPUs提供了标准S7-1500 cpu的功能,可以在cpu运行时中运行C/c++代码来执行自己在C/c++中实现的函数/算法。SIMATIC S7-1500 Software Controller是一款SIMATIC软件控制器,适用于基于pc的自动化解决方案。SIMATIC S7-PLCSIM Advanced模拟S7-1200,S7-1500和其他一些PLC衍生产品。 Siemens多款产品存在URL重定向漏洞,攻击者可利用该漏洞让服务器将合法用户重定向到攻击者选择的URL。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。
Formal description

厂商已发布了漏洞修复程序,请及时关注更新: https://support.industry.siemens.com/cs/ww/en/view/109773914/

Reference
https://cert-portal.siemens.com/productcert/html/ssa-876787.html
Impacted products
Name
['Siemens SIMATIC S7-PLCSIM Advanced', 'Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)', 'Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)', 'Siemens SIMATIC S7-1500 Software Controller V3', 'Siemens SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0) <3.1.4', 'Siemens SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0) <3.1.4', 'Siemens SIMATIC S7-1200 CPU family V4 (incl. SIPLUS variants)', 'Siemens SIMATIC S7-1500 Software Controller V2']
Show details on source website

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-46886"
    }
  },
  "description": "SIMATIC Drive Controllers\u662f\u4e3a\u751f\u4ea7\u673a\u5668\u7684\u81ea\u52a8\u5316\u800c\u8bbe\u8ba1\u7684\uff0c\u7ed3\u5408\u4e86SIMATIC S7-1500 CPU\u548cSINAMICS S120\u9a71\u52a8\u63a7\u5236\u7684\u529f\u80fd\u3002SIMATIC ET 200SP Open Controller\u662fSIMATIC S7-1500\u63a7\u5236\u5668\u7684\u57fa\u4e8epc\u7684\u7248\u672c\uff0c\u5305\u62ec\u53ef\u9009\u7684\u53ef\u89c6\u5316\u4ee5\u53ca\u7d27\u51d1\u8bbe\u5907\u4e2d\u7684\u4e2d\u592eI/o\u3002SIMATIC S7-1200 CPU\u548cSIMATIC S7-1500 CPU\u90fd\u662f\u4e13\u4e3a\u5168\u7403\u5236\u9020\u4e1a\uff0c\u98df\u54c1\u548c\u996e\u6599\u4ee5\u53ca\u5316\u5b66\u5de5\u4e1a\u7b49\u5de5\u4e1a\u73af\u5883\u4e2d\u7684\u79bb\u6563\u548c\u8fde\u7eed\u63a7\u5236\u800c\u8bbe\u8ba1\u3002SIMATIC S7-1500 MFP CPUs\u63d0\u4f9b\u4e86\u6807\u51c6S7-1500 cpu\u7684\u529f\u80fd\uff0c\u53ef\u4ee5\u5728cpu\u8fd0\u884c\u65f6\u4e2d\u8fd0\u884cC/c++\u4ee3\u7801\u6765\u6267\u884c\u81ea\u5df1\u5728C/c++\u4e2d\u5b9e\u73b0\u7684\u51fd\u6570/\u7b97\u6cd5\u3002SIMATIC S7-1500 Software Controller\u662f\u4e00\u6b3eSIMATIC\u8f6f\u4ef6\u63a7\u5236\u5668\uff0c\u9002\u7528\u4e8e\u57fa\u4e8epc\u7684\u81ea\u52a8\u5316\u89e3\u51b3\u65b9\u6848\u3002SIMATIC S7-PLCSIM Advanced\u6a21\u62dfS7-1200\uff0cS7-1500\u548c\u5176\u4ed6\u4e00\u4e9bPLC\u884d\u751f\u4ea7\u54c1\u3002\n\nSiemens\u591a\u6b3e\u4ea7\u54c1\u5b58\u5728URL\u91cd\u5b9a\u5411\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8ba9\u670d\u52a1\u5668\u5c06\u5408\u6cd5\u7528\u6237\u91cd\u5b9a\u5411\u5230\u653b\u51fb\u8005\u9009\u62e9\u7684URL\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://support.industry.siemens.com/cs/ww/en/view/109773914/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-40007",
  "openTime": "2024-10-10",
  "patchDescription": "SIMATIC Drive Controllers\u662f\u4e3a\u751f\u4ea7\u673a\u5668\u7684\u81ea\u52a8\u5316\u800c\u8bbe\u8ba1\u7684\uff0c\u7ed3\u5408\u4e86SIMATIC S7-1500 CPU\u548cSINAMICS S120\u9a71\u52a8\u63a7\u5236\u7684\u529f\u80fd\u3002SIMATIC ET 200SP Open Controller\u662fSIMATIC S7-1500\u63a7\u5236\u5668\u7684\u57fa\u4e8epc\u7684\u7248\u672c\uff0c\u5305\u62ec\u53ef\u9009\u7684\u53ef\u89c6\u5316\u4ee5\u53ca\u7d27\u51d1\u8bbe\u5907\u4e2d\u7684\u4e2d\u592eI/o\u3002SIMATIC S7-1200 CPU\u548cSIMATIC S7-1500 CPU\u90fd\u662f\u4e13\u4e3a\u5168\u7403\u5236\u9020\u4e1a\uff0c\u98df\u54c1\u548c\u996e\u6599\u4ee5\u53ca\u5316\u5b66\u5de5\u4e1a\u7b49\u5de5\u4e1a\u73af\u5883\u4e2d\u7684\u79bb\u6563\u548c\u8fde\u7eed\u63a7\u5236\u800c\u8bbe\u8ba1\u3002SIMATIC S7-1500 MFP CPUs\u63d0\u4f9b\u4e86\u6807\u51c6S7-1500 cpu\u7684\u529f\u80fd\uff0c\u53ef\u4ee5\u5728cpu\u8fd0\u884c\u65f6\u4e2d\u8fd0\u884cC/c++\u4ee3\u7801\u6765\u6267\u884c\u81ea\u5df1\u5728C/c++\u4e2d\u5b9e\u73b0\u7684\u51fd\u6570/\u7b97\u6cd5\u3002SIMATIC S7-1500 Software Controller\u662f\u4e00\u6b3eSIMATIC\u8f6f\u4ef6\u63a7\u5236\u5668\uff0c\u9002\u7528\u4e8e\u57fa\u4e8epc\u7684\u81ea\u52a8\u5316\u89e3\u51b3\u65b9\u6848\u3002SIMATIC S7-PLCSIM Advanced\u6a21\u62dfS7-1200\uff0cS7-1500\u548c\u5176\u4ed6\u4e00\u4e9bPLC\u884d\u751f\u4ea7\u54c1\u3002\r\n\r\nSiemens\u591a\u6b3e\u4ea7\u54c1\u5b58\u5728URL\u91cd\u5b9a\u5411\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8ba9\u670d\u52a1\u5668\u5c06\u5408\u6cd5\u7528\u6237\u91cd\u5b9a\u5411\u5230\u653b\u51fb\u8005\u9009\u62e9\u7684URL\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens\u591a\u6b3e\u4ea7\u54c1URL\u91cd\u5b9a\u5411\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens SIMATIC S7-PLCSIM Advanced",
      "Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)",
      "Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)",
      "Siemens SIMATIC S7-1500 Software Controller V3",
      "Siemens SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0) \u003c3.1.4",
      "Siemens SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0) \u003c3.1.4",
      "Siemens SIMATIC S7-1200 CPU family V4 (incl. SIPLUS variants)",
      "Siemens SIMATIC S7-1500 Software Controller V2"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-876787.html",
  "serverity": "\u4e2d",
  "submitTime": "2024-10-10",
  "title": "Siemens\u591a\u6b3e\u4ea7\u54c1URL\u91cd\u5b9a\u5411\u6f0f\u6d1e"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…