PLC Malicious program execution vulnerability

[kckku]

So we got this notice from our IT group this morning regarding an issue with a malicious program execution vulnerability with Omron (and Siemens) PLCs.

https://www.ia.omron.com/product/vulnerability/index.html

I read the notice and it basically recommends updating the controller firmware for the PLC. Is this something that we can do ourselves or do we need Omron to do it?

[photovoltaic]

1 hour ago, kckku said:

So we got this notice from our IT group this morning regarding an issue with a malicious program execution vulnerability with Omron (and Siemens) PLCs.

https://www.ia.omron.com/product/vulnerability/index.html

I read the notice and it basically recommends updating the controller firmware for the PLC. Is this something that we can do ourselves or do we need Omron to do it?

This is something Omron does.

[BobLfoot]

3 hours ago, kckku said:

So we got this notice from our IT group this morning regarding an issue with a malicious program execution vulnerability with Omron (and Siemens) PLCs.

https://www.ia.omron.com/product/vulnerability/index.html

I read the notice and it basically recommends updating the controller firmware for the PLC. Is this something that we can do ourselves or do we need Omron to do it?

Do you also happen to ahve the Siemens Advisory Link?

[kckku]

1 hour ago, BobLfoot said:

Do you also happen to ahve the Siemens Advisory Link?

Here's the Siemens link:

https://cert-portal.siemens.com/productcert/html/ssa-568427.html

[BobLfoot]

On 10/19/2022 at 0:23 PM, kckku said:

Here's the Siemens link:

https://cert-portal.siemens.com/productcert/html/ssa-568427.html

Thank You

[SKA AB]

We got the same from our IT-Department at my current client.

With Siemens, you can upgrade the firmware your selves, just take precatious to backup the code in the CPU, and if there are important variables/settings in DB's that are important, make sure to copy the values to an offline copy just in case something goes belly up.

I would connect with a current project, open the important data blocks and copy current values into startup values, just to have it saved off the cpu.