ICSA-19-253-03: Siemens simatic cloud connect 7 cc712 vulnerability
Affected Software
36 affected componentsFixes available
Siemens CloudConnect 712<1.1.5
1.1.5
Siemens ROX II<2.13.3
2.13.3
Siemens RUGGEDCOM APE 1404 Linux: All versions prior to Debian 9 Linux Image 2019-12-13
Siemens RUGGEDCOM RM1224 (6GK6108-4AM00)<6.2
6.2
Siemens RUGGEDCOM RX 1400 VPE Debian Linux: All versions prior to Debian 9 Linux Image 2019-12-13
Siemens RUGGEDCOM RX 1400 VPE Linux CloudConnect: All versions prior to Debian 9 Linux Image 2019-12-13 13 (only affected by CVE-2019-11479)
Siemens SCALANCE M804PB (6GK5804-0AP00-2AA2)<6.2
6.2
Siemens SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)<6.2
6.2
Siemens SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)<6.2
6.2
Siemens SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)<6.2
6.2
Siemens SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)<6.2
6.2
Siemens SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)<6.2
6.2
Siemens SCALANCE M874-2 (6GK5874-2AA00-2AA2)<6.2
6.2
Siemens SCALANCE M874-3 (6GK5874-3AA00-2AA2)<6.2
6.2
Siemens SCALANCE M875
Siemens SCALANCE M876-3 (6GK5876-3AA02-2BA2)<6.2
6.2
Siemens SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)<6.2
6.2
Siemens SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)<6.2
6.2
Siemens SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)<6.2
6.2
Siemens SCALANCE S602<4.1
4.1
Siemens SCALANCE S612<4.1
4.1
Siemens SCALANCE S615 (6GK5615-0AA00-2AA2)<6.2
6.2
Siemens SCALANCE S623<4.1
4.1
Siemens SCALANCE S627-2M<4.1
4.1
Siemens SCALANCE SC622-2C (6GK5622-2GS00-2AC2)<2.0.1
2.0.1
Siemens SCALANCE SC632-2C (6GK5632-2GS00-2AC2)<2.0.1
2.0.1
Siemens SCALANCE SC636-2C (6GK5636-2GS00-2AC2)<2.0.1
2.0.1
Siemens SCALANCE SC642-2C (6GK5642-2GS00-2AC2)<2.0.1
2.0.1
Siemens SCALANCE SC646-2C (6GK5646-2GS00-2AC2)<2.0.1
2.0.1
Siemens SCALANCE W1750D<8.6.0
8.6.0
Siemens SCALANCE W-700 IEEE 802.11n family<6.4
6.4
Siemens SCALANCE W-1700 IEEE 802.11ac family<2.0
2.0
Siemens SCALANCE WLC711
Siemens SCALANCE WLC712
Siemens SIMATIC CM 1542-1<3.0
3.0
Siemens SIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Event History
Mar 26, 2025
Advisory Published
11:45 PM
Frequently Asked Questions
1
What is the severity of ICSA-19-253-03?
The severity of ICSA-19-253-03 is considered high due to potential exploitation of vulnerabilities affecting several Siemens products.
2
How do I fix ICSA-19-253-03?
To fix ICSA-19-253-03, update all affected Siemens products to the latest Debian 9 Linux Image released on December 13, 2019.
3
What vulnerabilities are associated with ICSA-19-253-03?
ICSA-19-253-03 primarily highlights CVE-2019-11479 and other security weaknesses in the specified Siemens devices.
4
Which Siemens products are affected by ICSA-19-253-03?
The affected products include Siemens CloudConnect 712, Siemens RUGGEDCOM variants, and SCALANCE M804PB and M812-1.
5
Is there an exploit available for ICSA-19-253-03?
Yes, there are known exploits that can target the vulnerabilities described in ICSA-19-253-03, emphasizing the need for prompt action.