SSA-270778

Vulnerability from csaf_siemens - Published: 2020-02-11 00:00 - Updated: 2023-04-11 00:00
Summary
SSA-270778: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC Software

Notes

Summary
A Denial-of-Service vulnerability was found in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC software when encrypted communication is enabled. The vulnerability could allow an attacker with network access to cause a Denial-of-Service condition under certain circumstances (versions prior to SIMATIC WinCC V7.3 or SIMATIC PCS 7 V8.1 are not affected as encrypted communication is not an option). Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available. Note: The vulnerability is part of a shared component, used by various Siemens products (SIMATIC Communication Services - SCS). The installation of a fix version of any product also removes the vulnerability for other products on the same system, even if those products were not updated.
General Recommendations
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use
Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
To clipboard 

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A Denial-of-Service vulnerability was found in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC software when encrypted communication is enabled. The vulnerability could allow \nan attacker with network access to cause a Denial-of-Service condition under certain circumstances (versions prior to SIMATIC WinCC V7.3 or SIMATIC PCS 7 V8.1 are not affected as encrypted communication is not an option).\n\nSiemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.\n\nNote: The vulnerability is part of a shared component, used by various Siemens products (SIMATIC Communication Services - SCS). The installation of a fix version of any product also removes the vulnerability for other products on the same system, even if those products were not updated.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-270778: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC Software - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-270778.html"
      },
      {
        "category": "self",
        "summary": "SSA-270778: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC Software - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-270778.json"
      },
      {
        "category": "self",
        "summary": "SSA-270778: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC Software - PDF Version",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-270778.pdf"
      },
      {
        "category": "self",
        "summary": "SSA-270778: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC Software - TXT Version",
        "url": "https://cert-portal.siemens.com/productcert/txt/ssa-270778.txt"
      }
    ],
    "title": "SSA-270778: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC Software",
    "tracking": {
      "current_release_date": "2023-04-11T00:00:00Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-270778",
      "initial_release_date": "2020-02-11T00:00:00Z",
      "revision_history": [
        {
          "date": "2020-02-11T00:00:00Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        },
        {
          "date": "2020-03-10T00:00:00Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Added solution for SIMATIC NET PC Software"
        },
        {
          "date": "2020-04-14T00:00:00Z",
          "legacy_version": "1.2",
          "number": "3",
          "summary": "Added solution for SIMATIC WinCC (TIA Portal) V16"
        },
        {
          "date": "2020-05-12T00:00:00Z",
          "legacy_version": "1.3",
          "number": "4",
          "summary": "Added solution for SIMATIC WinCC V7.4"
        },
        {
          "date": "2020-07-14T00:00:00Z",
          "legacy_version": "1.4",
          "number": "5",
          "summary": "Added solution for SIMATIC PCS 7 V9.0"
        },
        {
          "date": "2020-09-08T00:00:00Z",
          "legacy_version": "1.5",
          "number": "6",
          "summary": "Added solution for SIMATIC WinCC (TIA Portal) V15.1"
        },
        {
          "date": "2021-01-12T00:00:00Z",
          "legacy_version": "1.6",
          "number": "7",
          "summary": "Added solution for SIMATIC WinCC (TIA Portal) V14"
        },
        {
          "date": "2022-04-12T00:00:00Z",
          "legacy_version": "1.7",
          "number": "8",
          "summary": "Added solution for SIMATIC PCS 7 V8.2 and related components; added solution for SIMATIC NET PC Software V14 and clarified affected versions; added a note regarding shared components"
        },
        {
          "date": "2023-04-11T00:00:00Z",
          "legacy_version": "1.8",
          "number": "9",
          "summary": "Added fix for SIMATIC BATCH V8.2; updated fix information for OpenPCS 7 V8.2 and SIMATIC Route Control V8.2; added download links for SIMATIC PCS 7 V8.2 SP1 and V9.0 SP3"
        }
      ],
      "status": "interim",
      "version": "9"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "OpenPCS 7 V8.1",
                  "product_id": "1"
                }
              }
            ],
            "category": "product_name",
            "name": "OpenPCS 7 V8.1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "OpenPCS 7 V8.2",
                  "product_id": "2"
                }
              }
            ],
            "category": "product_name",
            "name": "OpenPCS 7 V8.2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V9.0 Upd3",
                "product": {
                  "name": "OpenPCS 7 V9.0",
                  "product_id": "3"
                }
              }
            ],
            "category": "product_name",
            "name": "OpenPCS 7 V9.0"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC BATCH V8.1",
                  "product_id": "4"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC BATCH V8.1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV8.2 Upd12",
                "product": {
                  "name": "SIMATIC BATCH V8.2",
                  "product_id": "5"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC BATCH V8.2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V9.0 SP1 Upd5",
                "product": {
                  "name": "SIMATIC BATCH V9.0",
                  "product_id": "6"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC BATCH V9.0"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V14 SP1 Update 14",
                "product": {
                  "name": "SIMATIC NET PC Software V14",
                  "product_id": "7"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC NET PC Software V14"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC NET PC Software V15",
                  "product_id": "8"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC NET PC Software V15"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V16 Update 1",
                "product": {
                  "name": "SIMATIC NET PC Software V16",
                  "product_id": "9"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC NET PC Software V16"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC PCS 7 V8.1",
                  "product_id": "10"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC PCS 7 V8.1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC PCS 7 V8.2",
                  "product_id": "11"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC PCS 7 V8.2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V9.0 SP3",
                "product": {
                  "name": "SIMATIC PCS 7 V9.0",
                  "product_id": "12"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC PCS 7 V9.0"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC Route Control V8.1",
                  "product_id": "13"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Route Control V8.1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC Route Control V8.2",
                  "product_id": "14"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Route Control V8.2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V9.0 Upd4",
                "product": {
                  "name": "SIMATIC Route Control V9.0",
                  "product_id": "15"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Route Control V9.0"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V13 SP2",
                "product": {
                  "name": "SIMATIC WinCC (TIA Portal) V13",
                  "product_id": "16"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC WinCC (TIA Portal) V13"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V14 SP1 Update 10",
                "product": {
                  "name": "SIMATIC WinCC (TIA Portal) V14",
                  "product_id": "17"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC WinCC (TIA Portal) V14"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V15.1 Update 5",
                "product": {
                  "name": "SIMATIC WinCC (TIA Portal) V15.1",
                  "product_id": "18"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC WinCC (TIA Portal) V15.1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V16 Update 1",
                "product": {
                  "name": "SIMATIC WinCC (TIA Portal) V16",
                  "product_id": "19"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC WinCC (TIA Portal) V16"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC WinCC V7.3",
                  "product_id": "20"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC WinCC V7.3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V7.4 SP1 Update 14",
                "product": {
                  "name": "SIMATIC WinCC V7.4",
                  "product_id": "21"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC WinCC V7.4"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V7.5 SP1 Update 1",
                "product": {
                  "name": "SIMATIC WinCC V7.5",
                  "product_id": "22"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC WinCC V7.5"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-19282",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Through specially crafted messages, when encrypted communication is enabled, an attacker with network access could use the vulnerability to compromise the availability of the system by causing a Denial-of-Service condition.\nSuccessful exploitation requires no system privileges and no user interaction.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "14",
          "15",
          "16",
          "17",
          "18",
          "19",
          "20",
          "21",
          "22"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Use VPN for protecting network communication between cells",
          "product_ids": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22"
          ]
        },
        {
          "category": "mitigation",
          "details": "The vulnerability is fixed if SIMATIC WinCC V7.4 SP1 Update 14 or later version is installed on the same system",
          "product_ids": [
            "2",
            "14"
          ]
        },
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "1",
            "2",
            "4",
            "8",
            "10",
            "13",
            "14",
            "20"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V8.2 Upd12 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757796/"
        },
        {
          "category": "vendor_fix",
          "details": "See remediation for SIMATIC PCS 7 V9.0",
          "product_ids": [
            "3",
            "6",
            "15"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V8.2 SP1; then update SIMATIC WinCC to V7.4 SP1 Update 14 or later version on the same system",
          "product_ids": [
            "11"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109758443/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V9.0 SP3 or later version",
          "product_ids": [
            "12"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109780584/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V13 SP2 or later version",
          "product_ids": [
            "16"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109759782/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V15.1 Update 5 or later version",
          "product_ids": [
            "18"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109763890/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V16 Update 1 or later version",
          "product_ids": [
            "19"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109775861/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V7.4 SP1 Update 14 or later version",
          "product_ids": [
            "21"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109779373/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V7.5 SP1 Update 1 or later version",
          "product_ids": [
            "22"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109773812/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V14 SP1 Update 10 or later version",
          "product_ids": [
            "17"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109747387/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V14 SP1 Update 14 or later version",
          "product_ids": [
            "7"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109807351/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V16 Update 1 or later version",
          "product_ids": [
            "9"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778547/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22"
          ]
        }
      ],
      "title": "CVE-2019-19282"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.