plc.myforum.ro

mark11 · Member Joined: 30 Mar 2014 Posts: 114

Notes on Microsoft Updates 2018-01 (Meltdown and Specter)
https://support.industry.siemens.com/cs/document/109754953/
On the 3rd and 08th of January 2018 Microsoft has released updates for the Windows operating systems to close the vulnerabilities, which are grouped under the name Meltdown and Specter.

There are compatibility issues with these updates, see e.g. the notes in the Windows Server 2012 R2 Update
https://support.microsoft.com/en-us/help/4056895/windows-81-update-kb4056895
http://www.catalog.update.microsoft.com/Search.aspx?q=KB4056895

Siemens says:
According to current knowledge, these compatibility problems also affect SIMATIC products. For this reason, we recommend that you do not install these security updates.

List of currently known affected Windows Updates:

KB4056888 https://support.microsoft.com/kb/4056888
KB4056890 https://support.microsoft.com/kb/4056890
KB4056891 https://support.microsoft.com/kb/4056891
KB4056892 https://support.microsoft.com/kb/4056892
KB4056893 https://support.microsoft.com/kb/4056893
KB4056894 https://support.microsoft.com/kb/4056894
KB4056895 https://support.microsoft.com/kb/4056895
KB4056896 https://support.microsoft.com/kb/4056896
KB4056897 https://support.microsoft.com/kb/4056897
KB4056898 https://support.microsoft.com/kb/4056898
KB4056899 https://support.microsoft.com/kb/4056899
KB4054173 https://support.microsoft.com/kb/4054173
KB4054178 https://support.microsoft.com/kb/4054178
KB4055229 https://support.microsoft.com/kb/4055229

My recommendation is to apply these updates sequentially no matter where you are as long as Siemens do not know at this moment what pending software is affected.

The first level for applying these updates must be computers at a higher level in Enterprise which has directly connection with Internet. It's a must.
On the plant Level apply the SIEMENS security and sequentially Microsoft updates without affecting the Production Process.

mark11 · Member Joined: 30 Mar 2014 Posts: 114

As I said before you must install all the updates from Microsoft.
After nearly 2 months Siemens waked up and put this:

Which Microsoft Updates have been tested for compatibility with SIMATIC PCS 7?
https://support.industry.siemens.com/cs/document/18490004/

We recommend installing all the available updates of the named classifications to ensure that the system is protected. says Siemens today....

However, we cannot say anything about the compatibility of updates that we have not tested. Therefore, we recommend installing all the updates in the separate project-specific test environment prior to rolling out the updates in the productive environment.

Excel file in compliance with IEC 62443-2-3
https://support.industry.siemens.com/cs/attachments/18490004/security_patches_iec.xls

Packed XML and tip files in compliance with IEC 62443-2-3
https://support.industry.siemens.com/cs/attachments/18490004/security_patches_iec.zip

Again I have to warn you to install secquentially to see what is and what is not affected just in case.
As I can provide today you can install all the updates...