Yesterday CISA’s NCCIC-ICS published 22 control system security updates for products from Siemens. Siemens published ten additional updates on Tuesday that were not covered by CISA. I will be reporting on them this weekend.
SIMATIC Update #1
This update provides additional information on an advisory that was originally published on November 22nd, 2016. The new information includes specifically mentioning SIPLUS devices.
NOTE: The changes in the CISA advisory reflect changes that were reported by Siemens in an update from February 10th, 2022.
SIMATIC Update #2
This update provides additional information on an advisory that was originally published on December 10th, 2019 and most recently updated on March 10th, 2020. The new information includes adding solution for SIMATIC NET PC Software V14.
SIMATIC Update #3
This update provides additional information on an advisory that was originally published on February 11th, 2020 and most recently updated on January 12th, 2021. The new information includes adding r SIMATIC PCS 7 V8.2 and SIMATIC NET PC Software V14.
SIMATIC Update #4
This update provides additional information on an advisory that was originally published on July 9th, 2020 and most recently updated on November 11th, 2021. The new information includes adding solution for SIMATIC NET PC Software V14.
SIMATIC Update #5
This update provides additional information on an advisory that was originally published on June 8th, 2021. The new information includes adding solution for SIMATIC RF600R family.
SIMATIC Update #6
This update provides additional information on an advisory that was originally published on November 11th, 2021 and most recently updated on March 10th, 2022. The new information includes:
Adding solutions for r SIMATIC WinCC V7.4, SIMATIC PCS 7 V8.2 and SIMATIC PCS 7 V9.0, and
Adding SIMATIC NET PC Software to the list of affected products.
SIMATIC Update #7
This update provides additional information on an advisory that was originally published on February 10th, 2022. The new information includes adding solutions for SIMATIC WinCC V7.4, SIMATIC PCS 7 V8.2 and SIMATIC PCS 7 V9.0.
OPC UA Update
This update provides additional information on an advisory that was originally published on 8-31-17 and most recently updated on August 11th, 2020. The new information includes adding solution for SIMATIC NET PC Software V14.
Industrial Products Update #1
This update provides additional information on an advisory that was originally published on April 9th, 2019 and most recently updated on March 10th, 2020. The new information includes:
Adding solution for SIMATIC NET PC Software V14, and
Announcing that no remediation planned for V15
Industrial Products Update #2
This update provides additional information on an advisory that was originally published on February 11th, 2020 and most recently updated on February 10th, 2022. The new information includes updating remediation for SIMATIC CP 1623.
Industrial Products Update #3
This update provides additional information on an advisory that was originally published on July 13th, 2021. The new information includes:
Adding solution for SCALANCE X-300/X408 family, and
Adding SIMATIC RF180C to the list of affected products.
Industrial Products Update #4
This update provides additional information on an advisory that was originally published on February 10th, 2022 and most recently updated on March 10th, 2022. The new information includes adding solutions for r SIMATIC IPC427E, SIMATIC IPC 477E, and SIMATIC IPC477E PRO.
SCALANCE Update
This update provides additional information on an advisory that was originally published on April 14th, 2020 and most recently updated on February 10th, 2022. The new information includes adding solutions for the SCALANCE X-300 switch family (incl. X408 and SIPLUS NETvariants).
SIMOTICS Update
This update provides additional information on an advisory that was originally published on April 14th, 2020 and most recently updated on December 16th, 2021. The new information includes:
Adding all affected Desigo PXC and PXM20 products to the list of affected products, and
Adding solutions forAPOGEE PXC Series (BACnet) and TALON TC Series (BACnet).
PROFINET Update
This update provides additional information on an advisory that was was originally published on July 11th, 2021 and most recently updated on October 14th, 2021. The new information includes adding solutions for SCALANCE X-300 switch family (incl. X408 and SIPLUS NETvariants) and SCALANCE W-1700 (11ac) family.
APOGEE Update
This update provides additional information on an advisory that was was originally published on November 11th, 2021 and most recently updated on December 16th, 2021. The new information includes adding solutions for APOGEE PXC Compact (BACnet), APOGEE PXC Modular (BACnet), TALON TC Compact (BACnet), and TALON TC Modular (BACnet) products.
COMOS Update
This update provides additional information on an advisory that was originally published on January 13th, 2022 and most recently updated on February 10th, 2022. The new information includes updating remediation for COMOS V10.3.
Solid Edge Update
This update provides additional information on an advisory that was originally published on February 10th, 2022 and most recently updated on March 10th, 2022. The new information includes adding remediation for Teamcenter Visualization version line V13.2 and JT2Go.
Mendix Update
This update provides additional information on an advisory that was originally published on March 10th, 2022. The new information includes reporting that the default configuration for Mendix 9 is not affected.
RUGGEDCOM Update #1
This update provides additional information on an advisory that was originally published on March 10th, 2022. The new information includes:
Correcting the list of affected products and fix releases, and
Adding acknowledgements.
RUGGEDCOM Update #2
This update provides additional information on an advisory that was originally published on March 10th, 2022. The new information includes:
Correcting the list of affected products and fix releases, and
Adding acknowledgements.
Polarion Update
This update provides additional information on an advisory that was originally published on March 10th, 2022. The new information includes correcting list of affected versions; clarified difference between Polarion ALM and the freeware (WebClient for SVN).