Yesterday, CISA’s NCCIC-ICS updated eleven control-system security advisories for products from Wibu Systems, PTC, and Siemens (9). Siemens published eight additional updates on Tuesday which I will address this weekend.
Wibu-Systems Update
This update provides additional information on an advisory that was originally published on September 8th, 2020 and most recently updated on February 11th, 2021. The new information includes adding a link to Siemens Advisory SSA-455844.
PTC Update
This update provides additional information on an advisory that was originally published on March 8th, 2022. The new information includes adding links to advisories from:
NOTE: There is a typo in the link for the Agilent advisory provided in the Update. The link here is correct.
Industrial Products Update #1
This update provides additional information on an advisory that was originally published on September 10th, 2019 and most recently updated on September 14th, 2021. The new information includes re-adding SCALANCE S615 to the list of affected products.
Industrial Products Update #2
This update provides additional information on an advisory that was originally published on September 8th, 2020 and most recently updated on June 8th, 2021. The new information includes:
Adding solution for SIMATIC IPC3000 SMART V2, and
Clarifying that no further fixes are planned
Industrial Products Update #3
This update provides additional information on an advisory that was originally published on February 10th, 2022. The new information includes:
Clarifying that no remediation planned for SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP,
Adding solution for SIMATIC IPC127E and SIMATIC ET 200SP Open Controller CPU 1515SP PC2
SIMOTICS Update
This update provides additional information on an advisory that was originally published on April 13th, 2021. The new information includes adding solution for CVE-2021-25677.
Climatix Update
This update provides additional information on an advisory that was originally published on November 11th, 2021. The new information includes adding Climatix POL909 (AWB module) to the list of affected products.
SIMATIC Update #1
This update provides additional information on an advisory that was originally published on November 11th, 2021 and most recently updated on February 10th, 2022. The new information includes adding mitigation for CVE-2021-40358.
SIMATIC Update #2
This update provides additional information on an advisory that was originally published on February 10th, 2022. The new information includes adding solution for SIMATIC S7-PLCSIM Advanced.
Solid Edge Update
This update provides additional information on an advisory that was originally published on February 10th, 2022. The new information includes adding remediation for Teamcenter Visualization version lines V12.4 and V13.3.
SICAM Update
This update provides additional information on an advisory that was originally published on February 10th, 2022. The new information includes updating Acknowledgments and improving Mitigation Description.