Siemens SIMATIC CP 1543-1 Incorrect Authorization Vulnerability (SSA-654798)

Key Information Vulnerability Description Vulnerability ID: SSA-654798 Vulnerability Type: Incorrect Authorization Vulnerability Affected Product: SIMATIC CP 1543-1 Affected Version: V4.0 Description: The device improperly handles authorization, allowing unauthorized remote attackers to access the file system. Affected Scope Affected Product and Version: SIMATIC CP 1543-1 V4.0 (6GK7543-1AX10-0XE0) Affected Range: All versions prior to V4.0.44 Solution Recommendation: Upgrade to V4.0.50 or later Update Link: https://support.industry.siemens.com/cs/ww/en/view/109976120/ Further Recommendation: Refer to the "Exploitation and Mitigation" section Exploitation and Mitigation Mitigation: Restrict access to port 8448/tcp to trusted systems only Product-Specific Mitigation: Available in the "Affected Products and Solutions" section Security Recommendations Recommendation: Implement security measures to protect network access to devices Recommendation: Configure the environment in accordance with industrial security operational guidelines Recommendation: Refer to recommendations in the product manual Additional Information Contact: For further inquiries regarding security vulnerabilities in Siemens products and solutions, contact the Siemens Product Certification Center: https://www.siemens.com/cert/advisories Version Information Version: V1.0 Release Date: 2024-11-12 Terms and Conditions Terms of Use: https://www.siemens.com/productcert/terms-of-use

Goal Reached Thanks to every supporter — we hit 100%!

Siemens SIMATIC CP 1543-1 Incorrect Authorization Vulnerability (SSA-654798)