Skip to content

News

DejaBlue Vulnerabilities - Siemens Healthineers Products

Siemens Healthineers is aware of the reports about the vulnerabilities reported by Microsoft on August 13th, known as DejaBlue or CVE-2019-1181/1182. Microsoft released updates for Windows 7 SP1, Windows Server 2008 R2 SP1, Windows Server 2012, Windows 8.1, Windows Server 2012 R2, and all supported versions of Windows 10, including server versions on 2019-08-13, which fix a vulnerability in the Remote Desktop Service. The vulnerability could allow an unauthenticated remote attacker to execute arbitrary code on the target system if the system exposes the service to the network.

Microsoft DejaBlue Vulnerability in Siemens Industrial Products

Siemens is aware of the reports about the vulnerabilities reported by Microsoft on August 13th, known as DejaBlue or CVE-2019-1181/1182. Microsoft released updates for several supported Windows operating systems on 2019-08-13, which fix a vulnerability in the Remote Desktop Service. The vulnerability could allow an unauthenticated remote attacker to execute arbitrary code on the target system if the system exposes the service to the network.

BlackHat Talk "Rogue 7"

Siemens is aware of the research from Technion Haifa and Tel-Aviv University presented at BlackHat USA 2019 as "Rogue7: Rogue Engineering-Station attacks on S7 Simatic PLCs". Siemens recommends to enable the feature "access protection" to prohibit unauthorized modifications of the devices.

Siemens Advisory Day

Siemens takes the next step in improving the way vulnerabilities are communicated. Security advisories will be published on the second Tuesday of the month to support our customers the best we can in planning resources and maintenance windows. Publications out of band will only be performed in uncommon circumstances.

New Siemens Security Alerts & News Section

The Siemens Security Alerts & News section extends Siemens' CERT services to provide timely support to Siemens customers on imminent cyber threats. The alerts and news are published at the Newsroom section and can be subscribed via dedicated RSS Feeds.