Number: AV22-571
Date: 11 October 2022
On 11 October 2022, Siemens published Security Advisories to address vulnerabilities in multiple products. Included were critical updates for the following:
- Cerberus DMS – all versions
- Desigo CC – all versions
- Desigo CC Compact – all versions
- LOGO! 8 BM – all versions
- SICAM P850 – multiple versions and platforms
- SICAM P855 – multiple versions and platforms
- SIMATIC Drive Controller family – versions prior to V2.9.2
- SIMATIC ET 200SP Open Controller CPU 1515SP PC2 – versions prior to V21.9
- SIMATIC ET 200SP Open Controller CPU 1515SP PC – all versions
- SIMATIC S7-1200 CPU family – versions prior to V4.5.0
- SIMATIC S7-1500 CPU family – versions prior to V2.9.2
- SIMATIC S7-1500 Software Controller – versions prior to V21.9
- SIMATIC S7-PLCSIM Advanced – versions prior to V4.0
The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.