الوصف:

أصدرت Siemens عدة تحديثات لمعالجة عدد من الثغرات في المنتجات التالية:

• Control Center Server (CCS)
• LOGO! Soft Comfort
• Nucleus 4
• Nucleus NET
• Nucleus ReadyStart
• Nucleus RTOS
• Nucleus Source Code
• Opcenter Quality
• QMS Automotive
• SCALANCE X200-4P IRT
• SCALANCE X201-3P IRT
• SCALANCE X201-3P IRT PRO
• SCALANCE X202-2 IRT
• SCALANCE X202-2P IRT (incl. SIPLUS NET variant)
• SCALANCE X202-2P IRT PRO
• SCALANCE X204 IRT
• SCALANCE X204 IRT PRO
• SCALANCE X204-2 (incl. SIPLUS NET variant)
• SCALANCE X204-2FM
• SCALANCE X204-2LD (incl. SIPLUS NET variant)
• SCALANCE X204-2LD TS
• SCALANCE X204-2TS
• SCALANCE X206-1
• SCALANCE X206-1LD
• SCALANCE X208 (incl. SIPLUS NET variant)
• SCALANCE X208PRO
• SCALANCE X212-2 (incl. SIPLUS NET variant)
• SCALANCE X212-2LD
• SCALANCE X216
• SCALANCE X224
• SCALANCE XF201-3P IRT
• SCALANCE XF202-2P IRT
• SCALANCE XF204
• SCALANCE XF204 IRT
• SCALANCE XF204-2 (incl. SIPLUS NET variant)
• SCALANCE XF204-2BA IRT
• SCALANCE XF206-1
• SCALANCE XF208
• SIMOTICS CONNECT 400
• SINEMA Remote Connect Server
• Siveillance Video Open Network Bridge
• Solid Edge SE2020
• Solid Edge SE2021
• Tecnomatix RobotExpert
• TIM 4R-IE (incl. SIPLUS NET variants)
• TIM 4R-IE DNP3 (incl. SIPLUS NET variants)
• VSTAR

التهديدات:

يمكن للمهاجم استغلال الثغرات وتنفيذ ما يلي:

• هجمة حجب الخدمة (DoS attack)
• الكشف والإفصاح غير المصرح به للمعلومات
• تنفيذ برمجيات خبيثة عن بعد
• هجوم انتحال الشخصية (Spoofing attacks)

الإجراءات الوقائية:

يوصي المركز بتحديث النسخ المتأثرة حيث أصدرت Siemens توضيحًا لهذه التحديثات:

• https://cert-portal.siemens.com/productcert/txt/ssa-163226.txt
• https://cert-portal.siemens.com/productcert/txt/ssa-185699.txt
• https://cert-portal.siemens.com/productcert/txt/ssa-187092.txt
• https://cert-portal.siemens.com/productcert/txt/ssa-201384.txt
• https://cert-portal.siemens.com/productcert/txt/ssa-248289.txt
• https://cert-portal.siemens.com/productcert/txt/ssa-292794.txt
• https://cert-portal.siemens.com/productcert/txt/ssa-497656.txt
• https://cert-portal.siemens.com/productcert/txt/ssa-574442.txt
• https://cert-portal.siemens.com/productcert/txt/ssa-669158.txt
• https://cert-portal.siemens.com/productcert/txt/ssa-705111.txt
• https://cert-portal.siemens.com/productcert/txt/ssa-761844.txt
• https://cert-portal.siemens.com/productcert/txt/ssa-788287.txt
• https://cert-portal.siemens.com/productcert/txt/ssa-853866.txt
• https://cert-portal.siemens.com/productcert/txt/ssa-983300.txt