Publication Date: 2020-06-09
Last Update: 2022-04-12
Current Version: V2.0
CVSS v3.1 Base Score: 6.7

Affected Product and Versions Remediation
SIMATIC Automation Tool:
All versions < V4 SP2
Update to V4 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/98161300/
See further recommendations from section Workarounds and Mitigations
SIMATIC NET PC Software V14:
All versions < V14 SP1 Update 14
Update to V14 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807351/
See further recommendations from section Workarounds and Mitigations
SIMATIC NET PC Software V15:
All versions
Currently no fix is planned
See recommendations from section Workarounds and Mitigations
SIMATIC NET PC Software V16:
All versions < V16 Upd3
Update to V16 Upd3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780209/
See further recommendations from section Workarounds and Mitigations
SIMATIC PCS neo:
All versions < V3.0 SP1
Update to V3.0 SP1 or later version
To obtain SIMATIC PCS neo V3.0 SP1 contact your local support.
See further recommendations from section Workarounds and Mitigations
SIMATIC ProSave:
All versions < V17
Update to V17 or later version
https://support.industry.siemens.com/cs/ww/en/view/10347815/ Note: Some versions of SIMATIC ProSave are not available as separate download (e.g. V17). In this case, use the version of SIMATIC ProSave as bundled with the corresponding version of SIMATIC WinCC (TIA Portal).
See further recommendations from section Workarounds and Mitigations
SIMATIC S7-1500 Software Controller:
All versions < V21.8
Update to V21.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478528/
See further recommendations from section Workarounds and Mitigations
SIMATIC STEP 7:
All versions < V5.6 SP2 HF3
Update to V5.6 SP2 HF3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109779992/
See further recommendations from section Workarounds and Mitigations
SIMATIC STEP 7 (TIA Portal) V13:
All versions < V13 SP2 Update 4
Update to V13 SP2 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759753/
See further recommendations from section Workarounds and Mitigations
SIMATIC STEP 7 (TIA Portal) V14:
All versions < V14 SP1 Update 10
Update to V14 SP1 Update 10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109747387
See further recommendations from section Workarounds and Mitigations
SIMATIC STEP 7 (TIA Portal) V15:
All versions < V15.1 Update 5
Update to V15.1 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763890/
See further recommendations from section Workarounds and Mitigations
SIMATIC STEP 7 (TIA Portal) V16:
All versions < V16 Update 2
Update to V16 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/
See further recommendations from section Workarounds and Mitigations
SIMATIC WinCC OA V3.16:
All versions < V3.16 P018
Update to V3.16 P018 or later version
https://www.winccoa.com/downloads/category/versions-patches.html
See further recommendations from section Workarounds and Mitigations
SIMATIC WinCC OA V3.17:
All versions < V3.17 P003
Update to V3.17 P003 or later version
https://www.winccoa.com/downloads/category/versions-patches.html
See further recommendations from section Workarounds and Mitigations
SIMATIC WinCC Runtime Advanced:
All versions < V16 Update 2
Update to V16 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776018/
See further recommendations from section Workarounds and Mitigations
SIMATIC WinCC Runtime Professional V13:
All versions < V13 SP2 Update 4
Update to V13 SP2 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759782/
See further recommendations from section Workarounds and Mitigations
SIMATIC WinCC Runtime Professional V14:
All versions < V14 SP1 Update 10
Update to V14 SP1 Update 10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109747394/
See further recommendations from section Workarounds and Mitigations
SIMATIC WinCC Runtime Professional V15:
All versions < V15.1 Update 5
Update to V15.1 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763892/
See further recommendations from section Workarounds and Mitigations
SIMATIC WinCC Runtime Professional V16:
All versions < V16 Update 2
Update to V16 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776017/
See further recommendations from section Workarounds and Mitigations
SIMATIC WinCC V7.4:
All versions < V7.4 SP1 Update 14
Update to V7.4 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109779373/
See further recommendations from section Workarounds and Mitigations
SIMATIC WinCC V7.5:
All versions < V7.5 SP1 Update 3
Update to V7.5 SP1 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109773812/
See further recommendations from section Workarounds and Mitigations
SINAMICS Startdrive:
All Versions < V16 Update 3
Update to V16 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109781202/
See further recommendations from section Workarounds and Mitigations
SINAMICS STARTER:
All Versions < V5.4 HF2
Update to V5.4 HF2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109782792/
See further recommendations from section Workarounds and Mitigations
SINEC NMS:
All versions < V1.0 SP2
Update to version V1.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109797645/
See further recommendations from section Workarounds and Mitigations
SINEMA Server:
All versions < V14 SP3
Update to V14 SP3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801374/
See further recommendations from section Workarounds and Mitigations
SINUMERIK ONE virtual:
All Versions < V6.14
Update to V6.14 or later version
The update can be obtained from Siemens representative or via Siemens customer service
See further recommendations from section Workarounds and Mitigations
SINUMERIK Operate:
All Versions < V6.14
Update to V6.14 or later version
The update can be obtained from Siemens representative or via Siemens customer service
See further recommendations from section Workarounds and Mitigations

CVSS v3.1 Base Score 6.7
CVSS Vector CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
CWE: CWE-428: Unquoted Search Path or Element

https://www.siemens.com/cert/advisories