7 Updates Published – 9-8-20

Yesterday the CISA NCCIC-ICS published updates for seven control system security advisories for products from Siemens.

Industrial Products Update

This update provides additional information on an advisory that was originally published on September 10^th, 2019 and most recently updated on August 11^th, 2020. The new information includes the addition of mitigation measures for SIMATIC RF18xC/CI.

PROFINET Update

This update provides additional information on an advisory that was originally published on October 10^th, 2019 and most recently updated on August 11^th, 2020. The new information includes the addition of mitigation measures for:

• EK-ERTEC 200P, and

• S7-410 V8

SIMATIC Update #1

This update provides additional information on an advisory that was originally published on February 11^th, 2020 and most recently updated on July 14^th, 2020. The new information includes the addition of mitigation measures for SIMATIC WinCC (TIA Portal) V15.1.

SCALANCE Update

This update provides additional information on an advisory that was originally published on April 14^th, 2020 and most recently updated on August 11^th, 2020. The new information includes data about successor products for SIMATIC RF180C and RF182C.

RUGGEDCOM Update

This update provides additional information on an advisory that was originally published on April 14^th, 2020 and most recently updated on May 12^th, 2020. The new information includes the addition of mitigation measures for  SIMATIC RF18xC/CI.

SIMATIC Update #2

This update provides additional information on an advisory that was originally published on July 9^th, 2020 and most recently updated on August 11^th, 2020. The new information includes the addition of mitigation information for:

• SINAMICS Startdrive,

• SIMATIC STEP 7 (TIA Portal) V15, and

• SIMATIC WinCC Runtime Professional V15

UMC Stack Update

This update provides additional information on an advisory that was originally published on July 14^th, 2020 and most recently updated on August 11^th, 2020. The new information includes mitigation measures for SIMATIC STEP 7 (TIA Portal) V15.

Other Siemens Updates

Yesterday Siemens published three other updates that were not covered by NCCIC-ICS. If they are not addressed by CISA on Thursday, I will discuss them this weekend.