Security Warnings

Classification
These posts contain security warnings, including digital loopholes, electronic attacks, technical updates, and they are classified base on the level of severity.

Critical

High

Medium

Low

Siemens Updates

89

Warning Date: 13 January, 2021

Severity Level ● Critical

Warning Number: 2021-2314

Target Sector: Manufacturing - Other

Description:

Siemens has released security updates to address multiple vulnerabilities in the following products:

  • SCALANCE X-200 switch family (incl. SIPLUS NET variants)
    • All versions
  • SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
    • All versions
  • SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)
    • All versions < V4.1.0
  • JT2Go
    • All Versions <= V13.1.0
  • Teamcenter Visualization
    • All Versions <= V13.1.0
  • Solid Edge
    • All Versions < SE2021MP2

Threats:

Attacker could exploit these vulnerabilities by doing the following:

  • Denial of service (DoS)
  • Sensitive information disclosure - remotely
  • Buffer overflow
  • Arbitrary code execution

Best practice and Recommendations:

The CERT team encourages users to review Siemens security advisory and apply the necessary updates:

Last updated at 13 January, 2021