You are here

Siemens SIMATIC, SIMOTION, and SINUMERIK (ICSA-18-060-01) – Product Used in the Water and Wastewater and Energy Sectors

Siemens SIMATIC, SIMOTION, and SINUMERIK (ICSA-18-060-01) – Product Used in the Water and Wastewater and Energy Sectors

Created: Thursday, March 1, 2018 - 14:29
Categories:
Cybersecurity

ICS-CERT has released an advisory on a Siemens SIMATC, SIMOTION, and SINUMERIK vulnerability. Numerous versions of this product are affected. Successful exploitation of these vulnerabilities could result in execution of arbitrary code, extended privileges, and unauthenticated access to sensitive data. As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens’ Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. ICS-CERT also recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability. ICS-CERT.