12 Updates Published – 4-13-21

Yesterday CISA’s NCCIC-ICS updated twelve control system security advisories for products from Siemens.

SIMATIC Update #1

This update provides additional information for an advisory that was originally published on December 1^st, 2015 and most recently updated on May 23^rd, 2016. The new information includes:

• Clarifying product names, and

• Adding SIMATIC NET CP PROFIBUS devices

Industrial Products Update #1

This update provides additional information for an advisory that was originally published on September 10^th, 2019 and most recently updated on December 8^th, 2020. The new information includes:

• Adding affected products:

◦ SCALANCE S602,

◦ SCALANCE S612,

◦ SCALANCE S623, and

◦ SCALANCE S627-2M, and

• Adding solutions for:

◦ SIMATIC ITC1500 (PRO),

◦ SIMATIC ITC1900 (PRO), and

◦ SIMATIC ITC2200 (PRO)

SiNVR Update

This update provides additional information for an advisory that was originally published on December 10^th, 2019. The new information includes:

• Adding partial solution for SiNVR/SiVMS Video Server;

• Removing information for Control Center Server (CCS), which is now addressed in SSA-761844, and

• Adding link to PKE advisory.

NOTE: For more information on the last two items see yesterday’s post.

SCALANCE Update #1

This update provides additional information for an advisory that was originally published on February 11^th, 2020 and most recently updated on August 11^th, 2020. The new information includes adding solutions for:

• SCALANCE S602,

• SCALANCE S612,

• SCALANCE S623, and

• SCALANCE S627-2M

SCALANCE Update #2

This update provides additional information for an advisory that was originally published on February 11^th, 2020 and most recently updated on February 9^th, 2021. The new information includes adding affected products:

• SCALANCE S602,

• SCALANCE S612,

• SCALANCE S623, and

• SCALANCE S627-2M

Industrial Products Update #2

This update provides additional information for an advisory that was originally published on February 11^th, 2020 and most recently updated on February 9^th, 2021. The new information includes adding solutions for:

• SCALANCE S602,

• SCALANCE S612,

• SCALANCE S623, and

• SCALANCE S627-2M

SIMATIC Update #2

This update provides additional information for an advisory that was originally published on July 9^th, 2020 and most recently updated on December 8^th, 2020. The new information includes adding solution for SIMATIC PDM.

UMC Stack Update

This update provides additional information for an advisory that was originally published on July 14^th, 2020 and most recently updated on March 9^th, 2021. The new information includes adding solution for Opcenter Intelligence.

Industrial Products Update #3

This update provides additional information for an advisory that was originally published on September 8^th, 2020 and most recently updated on February 9^th, 2021. The new information includes adding solutions for:

• SIMATIC ITP1000, and

• SIMATIC IPC547G

Embedded TCP/IP Stacks Update

This update provides additional information for an advisory that was originally published on December 12^th, 2020 and most recently updated on March 9^th, 2021. The new information includes adding download link for SENTRON PAC3200T.

SCALANCE Update #3

This update provides additional information for an advisory that was originally published on March 9^th, 2021. The new information includes:

• Adding solutions for:

◦ SCALANCE M-800/S615, and

◦ RUGGEDCOM RM1224

• Updating solution for SCALANCE XR-300WG

SCALANCE Update #4

This update provides additional information for an advisory that was originally published on March 9^th, 2021. The new information includes adding solution for:

• SCALANCE M-800/S615, and

• RUGGEDCOM RM1224

Other Siemens Updates

Siemens also published five other advisories that were not covered by NCCIC-ICS. If they are not addressed by CISA on Thursday, I will address them this weekend.