Publication Date: 2022-05-10
Last Update: 2022-05-10
Current Version: V1.0
CVSS v3.1 Base Score: 6.5

Affected Product and Versions Remediation
SIMATIC NET PC Software V14:
All versions < V14 SP1 Update 14
Update to V14 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807351/
See further recommendations from section Workarounds and Mitigations
SIMATIC NET PC Software V15:
All versions
Currently no fix is planned
See recommendations from section Workarounds and Mitigations
SIMATIC NET PC Software V16:
All versions
Currently no fix is planned
See recommendations from section Workarounds and Mitigations
SIMATIC NET PC Software V17:
All versions < V17 SP1
Update to V17 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808270/
See further recommendations from section Workarounds and Mitigations
SITOP Manager:
All versions
Currently no fix is available
See recommendations from section Workarounds and Mitigations
TeleControl Server Basic V3:
All versions
Currently no fix is available
See recommendations from section Workarounds and Mitigations

CVSS v3.1 Base Score 6.5
CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
CWE: CWE-476: NULL Pointer Dereference

https://www.siemens.com/cert/advisories