ICS Advisory: Siemens SCALANCE SC-600 Family

Here is a summary of the provided document:

Summary:

As of January 10, 2023, the Cybersecurity and Infrastructure Security Agency (CISA) will no longer update ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. The document announces seven vulnerabilities in Siemens' SCALANCE SC-600 Family devices, affecting several products with versions prior to V3.0.2 or V3.1. The vulnerabilities are related to Acceptance of Extraneous Untrusted Data With Trusted Data, Use of Weak Hash, Forced Browsing, Uncontrolled Resource Consumption, Unchecked Return Value, Injection, and OS Command Injection. Siemens has released new versions and recommends updating to the latest versions or restricting access to the application webserver for trusted users only. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets and report suspected malicious activity to CISA.