You are here

Siemens SINAMICS (Update C) (ICSA-19-227-04) – Products Used in the Water and Wastewater and Energy Sectors

Siemens SINAMICS (Update C) (ICSA-19-227-04) – Products Used in the Water and Wastewater and Energy Sectors

Created: Wednesday, May 13, 2020 - 17:29
Categories:
Cybersecurity

May 12, 2020

CISA has updated this advisory with additional information on the affected products and mitigation measures. Read the advisory at CISA.

December 10, 2019

CISA has updated this advisory with additional details on the affected measures and mitigation measures. Read the advisory at CISA.

November 12, 2019

CISA has updated this advisory with additional details on the affected products and mitigation measures. Read the advisory at CISA.

August 16, 2019

The NCCIC has published an advisory on an uncontrolled resource consumption vulnerability in Siemens SINAMICS. Numerous products and versions of the products are affected. Successful exploitation of this vulnerability may allow an attacker to perform a denial-of-service attack. Siemens recommends users update to v4.8 SP2 HF9. Additionally, it has identified specific workarounds and mitigations users can apply to reduce the risk. The NCCIC also recommends a series of measures to mitigate the vulnerabilities. Read the advisory at CISA.