Industrial Security

New Vulnerability 06/18/2013

•  Vulnerability in Siemens COMOS 9.2 and 10.0

New Vulnerability 06/14/2013

•  Vulnerabilities in Simatic WinCC V7.2, SIMATIC PCS7 V8.0 SP1 and earlier

New Vulnerability 05/24/2013

•  Security update for network component SCALANCE-X 200 IRT

New Vulnerability 03/15/2013

•  Product update for vulnerabilities in WinCC (TIA Portal) V11

New Vulnerability 03/15/2013

•  Vulnerabilities in Simatic WinCC V7.0

New Vulnerability 02/13/2013

•  Security update for CP1604 / CP1616 communication processors (SIMATIC IPC onboard)

New Vulnerability 01/23/2013

•  ICS CERT Alert on a password tool targeting SIMATIC S7

New Vulnerability - 01/11/2013

•  Vulnerability in RF-Manager

New Vulnerability - 12/20/2012

•  Denial-of-Service vulnerability in S7-1200 from V2.x

New Vulnerability - 12/12/2012

•  Vulnerabilities in Automation License Manager

New Vulnerability - 12/12/2012

•  Update for RuggedCom ROS products

Achilles Level 2 Certification

As the first Automation vendor Siemens achieved the Achilles Level 2 certificate for communication robustness.The controllers Simatic S7-300, S7-400 and ET 200S as well as the communication processors CP 443-1 Advanced and CP 343-1 Advanced had been certified.

•  Learn more

New Vulnerability - 10/08/2012

•  Cross-Site Scripting vulnerability in the SIMATIC S7-1200 web application

New Vulnerability - 09/13/2012

•  Certificate for HTTPS Communication to S7-1200 V2.x

New Vulnerability - 09/10/2012

•  Update available to remove vulnerabilities in SCADA software WinCC V7.0 SP3

New vulnerability - 08/31/2012

•  Vulnerability in Rugged Com's system ROX and RuggedMax

New Vulnerability - 08/21/2012

•  Vulnerability in RuggedCom's Rugged Operating Systems ROS

New Vulnerability - 08/10/2012

•  Vulnerability in Plant Engineering Software COMOS

New Vulnerability - 07/31/2012

•  Vulnerability patched in SIMATIC S7-400

Siemens summary relating to ICS Alert 11-223-01

Following our Vulnerability Disclosure Policy we are providing a summary of information relating to ICS products from 2010

•  Vulnerability Disclosure Policy
•  Summary for ICS report ICSA-11-223-01A
•  Siemens Security Advisory relating to STEP 7 (SSA-110665) vulnerabilities
•  Siemens Security Advisory relating to WinCC (SSA-027884) vulnerabilities

New Vulnerability - 06/05/2012

•  New vulnerability found in WinCC

New Article

•  New Interview with Thomas Brandstetter, Siemens CERT

Hanover Fair 2012

Siemens Industrial Security: Visit us at Hanover Fair 2012 (Hall 9, Booth A72).