CERTFR-2022-AVI-435
Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

  • SICAM P850 versions antérieures à 3.00
  • Simcenter Femap versions antérieures à 2022.2
  • SIMATIC NET PC Software versions 14.x antérieures à 14 SP1 Update 14
  • SIMATIC NET PC Software versions 17.x antérieures à 17 SP1
  • SIMATIC Process Historian OPC UA Server versions antérieures à 2020 SP1
  • SIMATIC WinCC versions 7.5.x antérieures à V7.5 SP2 Update 8
  • SIMATIC CP 442-1 RNA versions antérieures à 1.5.18
  • SIMATIC CP 443-1 RNA versions antérieures à 1.5.18
  • JT2Go versions antérieures à 13.3.0.3
  • Teamcenter Visualization versions 13.3.x antérieures à 13.3.0.3
  • Teamcenter Visualization versions 14.0.x antérieures à 14.0.0.1
  • Desigo DXR2 versions antérieures à 01.21.142.5-22
  • Desigo PXC3 versions antérieures à 01.21.142.4-18
  • Desigo PXC4 versions antérieures à 02.20.142.10-10884
  • Desigo PXC5 versions antérieures à 02.20.142.10-10884
  • RUGGEDCOM RM1224 LTE(4G) EU et RM1224 LTE(4G) NAM versions antérieures à 7.1
  • SCALANCE M804PB, M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2), M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2), M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2), M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2), M826-2 SHDSL-Router (6GK5826-2AB00-2AB2), M874-2 (6GK5874-2AA00-2AA2), M874-3 (6GK5874-3AA00-2AA2), M876-3 (EVDO) (6GK5876-3AA02-2BA2), M876-3 (ROK) (6GK5876-3AA02-2EA2), M876-4 (EU) (6GK5876-4AA00-2BA2), M876-4 (NAM) (6GK5876-4AA00-2DA2), MUM856-1 (EU) (6GK5856-2EA00-3DA1), MUM856-1 (RoW) (6GK5856-2EA00-3AA1) et S615 (6GK5615-0AA00-2AA2) versions antérieures à 7.1
  • SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0) versions antérieures à 3.0.22
  • SIMATIC RTU3010C (6NH3112-0BA00-0XX0), RTU3030C (6NH3112-3BA00-0XX0), RTU3031C (6NH3112-3BB00-0XX0) et RTU3041C (6NH3112-4BB00-0XX0) versions antérieures à 5.0.14
  • SIPLUS NET CP 1543-1 versions antérieures à 3.0.22
  • OpenV2G versions antérieures à 0.9.5
  • Teamcenter versions 12.4.x antérieures à 12.4.0.13
  • Teamcenter versions 13.0.x antérieures à 13.0.0.9
  • Teamcenter versions 13.2.x antérieures à 13.2.0.8
  • Teamcenter versions 13.3.x antérieures à 13.3.0.3
  • SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0), RF610R ETSI (6GT2811-6BC10-0AA0), RF610R FCC (6GT2811-6BC10-1AA0), RF615R CMIIT (6GT2811-6CC10-2AA0), RF615R ETSI (6GT2811-6CC10-0AA0), RF615R FCC (6GT2811-6CC10-1AA0), RF650R ARIB (6GT2811-6AB20-4AA0), RF650R CMIIT (6GT2811-6AB20-2AA0), RF650R ETSI (6GT2811-6AB20-0AA0), RF650R FCC (6GT2811-6AB20-1AA0), RF680R ARIB (6GT2811-6AA10-4AA0), RF680R CMIIT (6GT2811-6AA10-2AA0), RF680R ETSI (6GT2811-6AA10-0AA0), RF680R FCC (6GT2811-6AA10-1AA0), RF685R ARIB (6GT2811-6CA10-4AA0), RF685R CMIIT (6GT2811-6CA10-2AA0), RF685R ETSI (6GT2811-6CA10-0AA0) et RF685R FCC (6GT2811-6CA10-1AA0) versions 3.0.x antérieures à 4.0
  • SIMATIC RF166C (6GT2002-0EE20), RF185C (6GT2002-0JE10), RF186C (6GT2002-0JE20), RF186CI (6GT2002-0JE50), RF188C (6GT2002-0JE40) et RF188CI (6GT2002-0JE60) versions 1.1.x antérieures à 1.3.2
  • SIMATIC RF360R (6GT2801-5BA30) versions antérieures à 2.0

En fonction de la vulnérabilité, l'éditeur ne prévoit pas de correctif de sécurité pour les produits suivants :

  • SITOP Manager toutes versions
  • TeleControl Server Basic versions 3.x
  • SIMATIC NET PC Software versions 15.x
  • SIMATIC NET PC Software versions 16.x
  • SIMATIC WinCC versions 16.x
  • SIMATIC WinCC versions 17.x
  • SIMATIC WinCC Runtime Professional toutes versions
  • SIMATIC WinCC Unified Scada Runtime toutes versions
  • SIMATIC PCS 7 versions 9.0.x et antérieures
  • SIMATIC PCS 7 versions 9.1.x
  • LOGO! CMR family toutes versions
  • SIMATIC CP 1545-1 (6GK7545-1GX00-0XE0) toutes versions
  • Teamcenter versions 13.1.x
  • Teamcenter versions 14.0.x

Se référer aux mesures de contournement listées dans les avis de l'éditeur.

Impacted products
Vendor Product Description
References

Show details on source website

To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cul\u003e \u003cli\u003eSICAM P850 versions ant\u00e9rieures \u00e0 3.00\u003c/li\u003e \u003cli\u003eSimcenter Femap versions ant\u00e9rieures \u00e0 2022.2\u003c/li\u003e \u003cli\u003eSIMATIC NET PC Software versions 14.x ant\u00e9rieures \u00e0 14 SP1 Update 14\u003c/li\u003e \u003cli\u003eSIMATIC NET PC Software versions 17.x ant\u00e9rieures \u00e0 17 SP1\u003c/li\u003e \u003cli\u003eSIMATIC Process Historian OPC UA Server versions ant\u00e9rieures \u00e0 2020 SP1\u003c/li\u003e \u003cli\u003eSIMATIC WinCC versions 7.5.x ant\u00e9rieures \u00e0 V7.5 SP2 Update 8\u003c/li\u003e \u003cli\u003eSIMATIC CP 442-1 RNA versions ant\u00e9rieures \u00e0 1.5.18\u003c/li\u003e \u003cli\u003eSIMATIC CP 443-1 RNA versions ant\u00e9rieures \u00e0 1.5.18\u003c/li\u003e \u003cli\u003eJT2Go versions ant\u00e9rieures \u00e0 13.3.0.3\u003c/li\u003e \u003cli\u003eTeamcenter Visualization versions 13.3.x ant\u00e9rieures \u00e0 13.3.0.3\u003c/li\u003e \u003cli\u003eTeamcenter Visualization versions 14.0.x ant\u00e9rieures \u00e0 14.0.0.1\u003c/li\u003e \u003cli\u003eDesigo DXR2 versions ant\u00e9rieures \u00e0 01.21.142.5-22\u003c/li\u003e \u003cli\u003eDesigo PXC3 versions ant\u00e9rieures \u00e0 01.21.142.4-18\u003c/li\u003e \u003cli\u003eDesigo PXC4 versions ant\u00e9rieures \u00e0 02.20.142.10-10884\u003c/li\u003e \u003cli\u003eDesigo PXC5 versions ant\u00e9rieures \u00e0 02.20.142.10-10884\u003c/li\u003e \u003cli\u003eRUGGEDCOM RM1224 LTE(4G) EU et RM1224 LTE(4G) NAM versions ant\u00e9rieures \u00e0 7.1\u003c/li\u003e \u003cli\u003eSCALANCE M804PB, M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2), M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2), M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2), M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2), M826-2 SHDSL-Router (6GK5826-2AB00-2AB2), M874-2 (6GK5874-2AA00-2AA2), M874-3 (6GK5874-3AA00-2AA2), M876-3 (EVDO) (6GK5876-3AA02-2BA2), M876-3 (ROK) (6GK5876-3AA02-2EA2), M876-4 (EU) (6GK5876-4AA00-2BA2), M876-4 (NAM) (6GK5876-4AA00-2DA2), MUM856-1 (EU) (6GK5856-2EA00-3DA1), MUM856-1 (RoW) (6GK5856-2EA00-3AA1) et S615 (6GK5615-0AA00-2AA2) versions ant\u00e9rieures \u00e0 7.1\u003c/li\u003e \u003cli\u003eSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0) versions ant\u00e9rieures \u00e0 3.0.22\u003c/li\u003e \u003cli\u003eSIMATIC RTU3010C (6NH3112-0BA00-0XX0), RTU3030C (6NH3112-3BA00-0XX0), RTU3031C (6NH3112-3BB00-0XX0) et RTU3041C (6NH3112-4BB00-0XX0) versions ant\u00e9rieures \u00e0 5.0.14\u003c/li\u003e \u003cli\u003eSIPLUS NET CP 1543-1 versions ant\u00e9rieures \u00e0 3.0.22\u003c/li\u003e \u003cli\u003eOpenV2G versions ant\u00e9rieures \u00e0 0.9.5\u003c/li\u003e \u003cli\u003eTeamcenter versions 12.4.x ant\u00e9rieures \u00e0 12.4.0.13\u003c/li\u003e \u003cli\u003eTeamcenter versions 13.0.x ant\u00e9rieures \u00e0 13.0.0.9\u003c/li\u003e \u003cli\u003eTeamcenter versions 13.2.x ant\u00e9rieures \u00e0 13.2.0.8\u003c/li\u003e \u003cli\u003eTeamcenter versions 13.3.x ant\u00e9rieures \u00e0 13.3.0.3\u003c/li\u003e \u003cli\u003eSIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0), RF610R ETSI (6GT2811-6BC10-0AA0), RF610R FCC (6GT2811-6BC10-1AA0), RF615R CMIIT (6GT2811-6CC10-2AA0), RF615R ETSI (6GT2811-6CC10-0AA0), RF615R FCC (6GT2811-6CC10-1AA0), RF650R ARIB (6GT2811-6AB20-4AA0), RF650R CMIIT (6GT2811-6AB20-2AA0), RF650R ETSI (6GT2811-6AB20-0AA0), RF650R FCC (6GT2811-6AB20-1AA0), RF680R ARIB (6GT2811-6AA10-4AA0), RF680R CMIIT (6GT2811-6AA10-2AA0), RF680R ETSI (6GT2811-6AA10-0AA0), RF680R FCC (6GT2811-6AA10-1AA0), RF685R ARIB (6GT2811-6CA10-4AA0), RF685R CMIIT (6GT2811-6CA10-2AA0), RF685R ETSI (6GT2811-6CA10-0AA0) et RF685R FCC (6GT2811-6CA10-1AA0) versions 3.0.x ant\u00e9rieures \u00e0 4.0\u003c/li\u003e \u003cli\u003eSIMATIC RF166C (6GT2002-0EE20), RF185C (6GT2002-0JE10), RF186C (6GT2002-0JE20), RF186CI (6GT2002-0JE50), RF188C (6GT2002-0JE40) et RF188CI (6GT2002-0JE60) versions 1.1.x ant\u00e9rieures \u00e0 1.3.2\u003c/li\u003e \u003cli\u003eSIMATIC RF360R (6GT2801-5BA30) versions ant\u00e9rieures \u00e0 2.0\u003c/li\u003e \u003c/ul\u003e \u003cp\u003eEn fonction de la vuln\u00e9rabilit\u00e9, l\u0027\u00e9diteur ne pr\u00e9voit pas de correctif de s\u00e9curit\u00e9 pour les produits suivants :\u003c/p\u003e \u003cul\u003e \u003cli\u003eSITOP Manager toutes versions\u003c/li\u003e \u003cli\u003eTeleControl Server Basic versions 3.x\u003c/li\u003e \u003cli\u003eSIMATIC NET PC Software versions 15.x\u003c/li\u003e \u003cli\u003eSIMATIC NET PC Software versions 16.x\u003c/li\u003e \u003cli\u003eSIMATIC WinCC versions 16.x\u003c/li\u003e \u003cli\u003eSIMATIC WinCC versions 17.x\u003c/li\u003e \u003cli\u003eSIMATIC WinCC Runtime Professional toutes versions\u003c/li\u003e \u003cli\u003eSIMATIC WinCC Unified Scada Runtime toutes versions\u003c/li\u003e \u003cli\u003eSIMATIC PCS 7 versions 9.0.x et ant\u00e9rieures\u003c/li\u003e \u003cli\u003eSIMATIC PCS 7 versions 9.1.x\u003c/li\u003e \u003cli\u003eLOGO! CMR family toutes versions\u003c/li\u003e \u003cli\u003eSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0) toutes versions\u003c/li\u003e \u003cli\u003eTeamcenter versions 13.1.x\u003c/li\u003e \u003cli\u003eTeamcenter versions 14.0.x\u003c/li\u003e \u003c/ul\u003e \u003cp\u003eSe r\u00e9f\u00e9rer aux mesures de contournement list\u00e9es dans les avis de l\u0027\u00e9diteur.\u003c/p\u003e ",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-27653",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27653"
    },
    {
      "name": "CVE-2022-24043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24043"
    },
    {
      "name": "CVE-2022-29879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29879"
    },
    {
      "name": "CVE-2022-24044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24044"
    },
    {
      "name": "CVE-2022-24041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24041"
    },
    {
      "name": "CVE-2022-27242",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27242"
    },
    {
      "name": "CVE-2021-22901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22901"
    },
    {
      "name": "CVE-2022-24290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24290"
    },
    {
      "name": "CVE-2022-29880",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29880"
    },
    {
      "name": "CVE-2022-24045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24045"
    },
    {
      "name": "CVE-2022-29882",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29882"
    },
    {
      "name": "CVE-2022-24039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24039"
    },
    {
      "name": "CVE-2022-24042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24042"
    },
    {
      "name": "CVE-2021-22924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22924"
    },
    {
      "name": "CVE-2022-29033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29033"
    },
    {
      "name": "CVE-2022-24040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24040"
    },
    {
      "name": "CVE-2022-24287",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24287"
    },
    {
      "name": "CVE-2021-41545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41545"
    },
    {
      "name": "CVE-2022-29873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29873"
    },
    {
      "name": "CVE-2022-29801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29801"
    },
    {
      "name": "CVE-2021-40142",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-40142"
    },
    {
      "name": "CVE-2022-29874",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29874"
    },
    {
      "name": "CVE-2022-27640",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27640"
    },
    {
      "name": "CVE-2022-29876",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29876"
    },
    {
      "name": "CVE-2022-29877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29877"
    },
    {
      "name": "CVE-2021-45117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-45117"
    },
    {
      "name": "CVE-2022-29029",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29029"
    },
    {
      "name": "CVE-2022-29881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29881"
    },
    {
      "name": "CVE-2022-29032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29032"
    },
    {
      "name": "CVE-2022-29872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29872"
    },
    {
      "name": "CVE-2022-29878",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29878"
    },
    {
      "name": "CVE-2021-31340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31340"
    },
    {
      "name": "CVE-2022-29031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29031"
    },
    {
      "name": "CVE-2022-29030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29030"
    },
    {
      "name": "CVE-2022-29028",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29028"
    },
    {
      "name": "CVE-2022-29883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29883"
    }
  ],
  "initial_release_date": "2022-05-10T00:00:00",
  "last_revision_date": "2022-05-10T00:00:00",
  "links": [],
  "reference": "CERTFR-2022-AVI-435",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-05-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSiemens. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-736385 du 10 mai 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-736385.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-732250 du 10 mai 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-732250.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-321292 du 10 mai 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-321292.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-787292 du 10 mai 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-787292.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-162616 du 10 mai 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-162616.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-553086 du 10 mai 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-553086.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-480937 du 10 mai 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-480937.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-626968 du 10 mai 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-626968.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-363107 du 10 mai 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-363107.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-789162 du 10 mai 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-789162.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-165073 du 10 mai 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-165073.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-662649 du 10 mai 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-662649.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-285795 du 10 mai 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-285795.html"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.