QID 590736

Date Published: 2022-03-17

QID 590736: Siemens SIMATIC NET CP 443-1 OPC UA Multiple Vulnerabilities (ICSA-21-159-11)

AFFECTED PRODUCTS
The following versions of SIMATIC NET CP 443-1 OPC UA are affected:
SIMATIC NET CP 443-1 OPC UA: All versions

QID Detection Logic (Authenticated):
QID checks for the Vulnerable version of using passive scanning

Successful exploitation of these vulnerabilities could create a denial-of-service condition as well as other specified and unspecified impacts.

  • CVSS V3 rated as Critical - 9.8 severity.
  • CVSS V2 rated as High - 7.5 severity.
  • Solution

    Customers are advised to refer to CERT MITIGATIONS section ICSA-21-159-11 for affected packages and patching details.

    Vendor References
    Software Advisories
    Advisory ID Software Component Link