Yesterday CISA’s NCCIC-ICS published nine updates of control system security advisories for products from Siemens.
PKE Update
This update provides additional information on an advisory that was originally published on March 10th, 2020 and most recently updated on March 20th, 2021. The new information includes adding solution for CVE-2019-19298 and related additional security hardening measures.
SIMATICT Update
This update provides additional information on an advisory that was originally published on November 10th, 2020. The new information includes adding SIMATIC TDC CPU555 to the list of affected products.
TCP/IP Stack Update
This update provides additional information on an advisory that was originally published on March 9th, 2021 and most recently updated on May 11th, 2021. The new information includes adding solutions for:
SENTRON 3VA COM100/800, and
DSP800.
SCALANCE Update
This update provides additional information on an advisory that was originally published on May 11th, 2021. The new information includes adding CVE-2021-34617 and CVE-2021-34618 from updated Aruba Advisory.
SINAMICS Update #1
This update provides additional information on an advisory that was originally published on May 11th, 2021. The new information includes updating information for:
SINAMICS SL150,
SINAMICS SM150, and
SINAMICS SM150i
SINAMICS Update #2
This update provides additional information on an advisory that was originally published on May 11th, 2021. The new information includes updating information for:
SINAMICS SL150,
SINAMICS SM150c and
SINAMICS SM150i
NOTE: As best I can tell, this should have been Update A not Update B.
Linux-Based Products Update
This update provides additional information on an advisory that was originally published on May 11th, 2021 and most recently updated on July 13th, 2021. The new information includes adding solution for SIMATIC NET CP 1543-1.
Industrial Products Update
This update provides additional information on an advisory that was originally published on July 11th, 2021. The new information includes adding solutions for:
SINUMERIK ONE MCP and
SIMATIC NET CP 1543-1
PROFINET Update
This update provides additional information on an advisory that was originally published on July 11th, 2021. The new information includes adding solutions for:
SCALANCE XR-300WG,
SCALANCE XB-200,
SCALANCE XP-200,
SCALANCE XC-200, S
CALANCE XF-200, and
EK-ERTEC 200P
Other Siemens Updates
Siemens published three additional updates yesterday. Unless NCCIC-ICS covers them tomorrow, I will address them this weekend.