Skip to content

2022

  • 2 min read

Remarks by ETM regarding SSA-111512 for SIMATIC WinCC OA

This article written by ETM, the company that develops SIMATIC WinCC OA, provides additional insights related to SSA-111512:

On April 6, 2022, "FORESCOUT Vedere Labs" informed us about the intended publication of an article dubbed "OT:ICEFALL" mentioning two vulnerabilities regarding WinCC OA:

  • "FSCT-2022-0060: Siemens WinCC OA / ETM PVSS II proprietary protocol with unauthenticated functionality" and
  • "FSCT-2022-0059: Siemens WinCC OA Desktop UI Authentication Bypass".

ETM immediately analyzed the claims made in these reports. Based on our level of information, they are based on WinCC Open Architecture (OA) version 3.15.

  • 1 min read

Siemens S7-1200 4.5 Unauthenticated Access

On March 10, 2022, a researcher dubbed "RoseSecurity", published an exploit on PacketStorm, titled "Siemens S7-1200 4.5 Unauthenticated Access". The exploit is demonstrated by curl commands that show how CPU start/stop commands can be triggered on Siemens S7-1200 devices without prior authentication.

  • 3 min read

New Siemens Security Advisory (SSA) Formats

Siemens ProductCERT introduced new formats - namely HTML and CSAF - for its security advisories and will phase out the traditional formats (PDF, TXT, and CVRF) over time. This article gives a short overview on the reasoning behind this decision and what the future brings.

  • 1 min read

Apply Defense in Depth

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' Operational Guidelines for Industrial Security, and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity