Siemens SINAMICS (Update C) (ICSA-19-227-04) – Products Used in the Water and Wastewater and Energy Sectors
Created: Wednesday, May 13, 2020 - 21:29
Categories: Cybersecurity
May 12, 2020
CISA has updated this advisory with additional information on the affected products and mitigation measures. Read the advisory at CISA.
December 10, 2019
CISA has updated this advisory with additional details on the affected measures and mitigation measures. Read the advisory at CISA.
November 12, 2019
CISA has updated this advisory with additional details on the affected products and mitigation measures. Read the advisory at CISA.
August 16, 2019
The NCCIC has published an advisory on an uncontrolled resource consumption vulnerability in Siemens SINAMICS. Numerous products and versions of the products are affected. Successful exploitation of this vulnerability may allow an attacker to perform a denial-of-service attack. Siemens recommends users update to v4.8 SP2 HF9. Additionally, it has identified specific workarounds and mitigations users can apply to reduce the risk. The NCCIC also recommends a series of measures to mitigate the vulnerabilities. Read the advisory at CISA.