SSA-042050
Vulnerability from csaf_siemens - Published: 2023-06-13 00:00 - Updated: 2024-12-10 00:00Summary
SSA-042050: Know-How Protection Mechanism Failure in TIA Portal
Notes
Summary: The know-how protection feature in Totally Integrated Automation Portal (TIA Portal) does not properly update the encryption of existing program blocks when a project file is updated. This could allow attackers with access to the project file to recover previous - yet unprotected - versions of the project without the knowledge of the know-how protection password.
Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download:
https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use: The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.
CWE-693
- Protection Mechanism Failure
Affected products
Known affected
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Totally Integrated Automation Portal (TIA Portal) V14
Siemens / Totally Integrated Automation Portal (TIA Portal) V14
|
vers:all/* |
Mitigation
No Fix Planned
|
|
|
Totally Integrated Automation Portal (TIA Portal) V15
Siemens / Totally Integrated Automation Portal (TIA Portal) V15
|
vers:all/* |
Mitigation
No Fix Planned
|
|
|
Totally Integrated Automation Portal (TIA Portal) V15.1
Siemens / Totally Integrated Automation Portal (TIA Portal) V15.1
|
vers:all/* |
Mitigation
No Fix Planned
|
|
|
Totally Integrated Automation Portal (TIA Portal) V16
Siemens / Totally Integrated Automation Portal (TIA Portal) V16
|
vers:all/* |
Mitigation
No Fix Planned
|
|
|
Totally Integrated Automation Portal (TIA Portal) V17
Siemens / Totally Integrated Automation Portal (TIA Portal) V17
|
vers:all/* |
Mitigation
No Fix Planned
|
|
|
Totally Integrated Automation Portal (TIA Portal) V18
Siemens / Totally Integrated Automation Portal (TIA Portal) V18
|
vers:all/* |
Mitigation
No Fix Planned
|
|
|
Totally Integrated Automation Portal (TIA Portal) V19
Siemens / Totally Integrated Automation Portal (TIA Portal) V19
|
vers:all/* |
Mitigation
No Fix Planned
|
|
|
Totally Integrated Automation Portal (TIA Portal) V20
Siemens / Totally Integrated Automation Portal (TIA Portal) V20
|
vers:all/* |
Mitigation
No Fix Planned
|
References
2 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
"tlp": {
"label": "WHITE"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The know-how protection feature in Totally Integrated Automation Portal (TIA Portal) does not properly update the encryption of existing program blocks when a project file is updated. This could allow attackers with access to the project file to recover previous - yet unprotected - versions of the project without the knowledge of the know-how protection password.\n\nSiemens recommends specific countermeasures for products where fixes are not, or not yet available.",
"title": "Summary"
},
{
"category": "general",
"text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "productcert@siemens.com",
"name": "Siemens ProductCERT",
"namespace": "https://www.siemens.com"
},
"references": [
{
"category": "self",
"summary": "SSA-042050: Know-How Protection Mechanism Failure in TIA Portal - HTML Version",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-042050.html"
},
{
"category": "self",
"summary": "SSA-042050: Know-How Protection Mechanism Failure in TIA Portal - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-042050.json"
}
],
"title": "SSA-042050: Know-How Protection Mechanism Failure in TIA Portal",
"tracking": {
"current_release_date": "2024-12-10T00:00:00Z",
"generator": {
"engine": {
"name": "Siemens ProductCERT CSAF Generator",
"version": "1"
}
},
"id": "SSA-042050",
"initial_release_date": "2023-06-13T00:00:00Z",
"revision_history": [
{
"date": "2023-06-13T00:00:00Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
},
{
"date": "2023-12-12T00:00:00Z",
"legacy_version": "1.1",
"number": "2",
"summary": "Added Totally Integrated Automation Portal (TIA Portal) V19 as affected product"
},
{
"date": "2024-12-10T00:00:00Z",
"legacy_version": "1.2",
"number": "3",
"summary": "No fix planned for Totally Integrated Automation Portal (TIA Portal) V19; Added Totally Integrated Automation Portal (TIA Portal) V20 as affected product"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Totally Integrated Automation Portal (TIA Portal) V14",
"product_id": "1"
}
}
],
"category": "product_name",
"name": "Totally Integrated Automation Portal (TIA Portal) V14"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Totally Integrated Automation Portal (TIA Portal) V15",
"product_id": "2"
}
}
],
"category": "product_name",
"name": "Totally Integrated Automation Portal (TIA Portal) V15"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Totally Integrated Automation Portal (TIA Portal) V15.1",
"product_id": "3"
}
}
],
"category": "product_name",
"name": "Totally Integrated Automation Portal (TIA Portal) V15.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Totally Integrated Automation Portal (TIA Portal) V16",
"product_id": "4"
}
}
],
"category": "product_name",
"name": "Totally Integrated Automation Portal (TIA Portal) V16"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Totally Integrated Automation Portal (TIA Portal) V17",
"product_id": "5"
}
}
],
"category": "product_name",
"name": "Totally Integrated Automation Portal (TIA Portal) V17"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Totally Integrated Automation Portal (TIA Portal) V18",
"product_id": "6"
}
}
],
"category": "product_name",
"name": "Totally Integrated Automation Portal (TIA Portal) V18"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Totally Integrated Automation Portal (TIA Portal) V19",
"product_id": "7"
}
}
],
"category": "product_name",
"name": "Totally Integrated Automation Portal (TIA Portal) V19"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Totally Integrated Automation Portal (TIA Portal) V20",
"product_id": "8"
}
}
],
"category": "product_name",
"name": "Totally Integrated Automation Portal (TIA Portal) V20"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-30757",
"cwe": {
"id": "CWE-693",
"name": "Protection Mechanism Failure"
},
"notes": [
{
"category": "summary",
"text": "The know-how protection feature in affected products does not properly update the encryption of existing program blocks when a project file is updated.\r\n\r\nThis could allow attackers with access to the project file to recover previous - yet unprotected - versions of the project without the knowledge of the know-how protection password.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Archive the project: the optimization of project data during archiving removes older, possibly unprotected project content; see also the chapter \"Protecting Blocks\" in the system manual (\nhttps://docs.tia.siemens.cloud/r/en-us/v20/protecting-blocks)",
"product_ids": [
"8"
]
},
{
"category": "mitigation",
"details": "Archive the project: the optimization of project data during archiving removes older, possibly unprotected project content; see also the chapter \"Protecting Blocks\" in the system manual (\nhttps://support.industry.siemens.com/cs/mdm/109742284?c=87347935883)",
"product_ids": [
"1"
]
},
{
"category": "mitigation",
"details": "Archive the project: the optimization of project data during archiving removes older, possibly unprotected project content; see also the chapter \"Protecting Blocks\" in the system manual (\nhttps://support.industry.siemens.com/cs/mdm/109755202?c=105012867723)",
"product_ids": [
"3"
]
},
{
"category": "mitigation",
"details": "Archive the project: the optimization of project data during archiving removes older, possibly unprotected project content; see also the chapter \"Protecting Blocks\" in the system manual (\nhttps://support.industry.siemens.com/cs/mdm/109764516?c=105012867723)",
"product_ids": [
"2"
]
},
{
"category": "mitigation",
"details": "Archive the project: the optimization of project data during archiving removes older, possibly unprotected project content; see also the chapter \"Protecting Blocks\" in the system manual (\nhttps://support.industry.siemens.com/cs/mdm/109773506?c=126979557387)",
"product_ids": [
"4"
]
},
{
"category": "mitigation",
"details": "Archive the project: the optimization of project data during archiving removes older, possibly unprotected project content; see also the chapter \"Protecting Blocks\" in the system manual (\nhttps://support.industry.siemens.com/cs/mdm/109798671?c=132780438283)",
"product_ids": [
"5"
]
},
{
"category": "mitigation",
"details": "Archive the project: the optimization of project data during archiving removes older, possibly unprotected project content; see also the chapter \"Protecting Blocks\" in the system manual (\nhttps://support.industry.siemens.com/cs/mdm/109815056?c=132780438283)",
"product_ids": [
"6"
]
},
{
"category": "mitigation",
"details": "Archive the project: the optimization of project data during archiving removes older, possibly unprotected project content; see also the chapters \"Security information\" and \"Protecting Blocks\" in the system manual (\nhttps://support.industry.siemens.com/cs/ww/en/view/109826862/)",
"product_ids": [
"7"
]
},
{
"category": "no_fix_planned",
"details": "Currently no fix is planned",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:T/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8"
]
}
],
"title": "CVE-2023-30757"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…