Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC (Update A)

Published

2020-03-10 14:50:00 UTC

Summary

This updated advisory is a follow-up to the original advisory titled ICSA-19-042-06 ICSA-20-042-06 Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC that was published February 11, 2020, to the ICS webpage on us-cert.gov. This advisory contains mitigations for an incorrect calculation of buffer size vulnerability in some Siemens SIMATIC software products.