Publication Date: 2017-08-30
Last Update: 2022-04-12
Current Version: V1.5
CVSS v3.1 Base Score: 8.2

Affected Product and Versions Remediation
SIMATIC IT Production Suite:
All Versions >= V6.5 and < V7.1
Update to V7.1 or later version
To obtain SIMATIC IT Production Suite contact your local support.
See further recommendations from section Workarounds and Mitigations
SIMATIC NET PC Software V14:
All versions < V14 SP1 Update 14
Update to V14 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807351/
See further recommendations from section Workarounds and Mitigations
SIMATIC PCS 7:
Versions V8.0, V8.1
Currently no fix is planned
See recommendations from section Workarounds and Mitigations
SIMATIC WinCC:
All Versions < V7.2
Currently no fix is planned
See recommendations from section Workarounds and Mitigations
SIMATIC WinCC Runtime Professional V13:
All Versions
Currently no fix is planned
See recommendations from section Workarounds and Mitigations
SIMATIC WinCC Runtime Professional V14:
All Versions < V14 SP1
Update to V14 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746276
See further recommendations from section Workarounds and Mitigations

CVSS v3.1 Base Score 8.2
CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:P/RL:O/RC:C
CWE: CWE-611: Improper Restriction of XML External Entity Reference

https://www.siemens.com/cert/advisories