plc.myforum.ro

gaty · Member Joined: 01 Mar 2017 Posts: 188

Potential IT security weak point in VMware vSphere ESXi V6.5 / V6.7
https://support.industry.siemens.com/cs/document/109793232/
The VMware vSphere ESXi versions V6.5 / V6.7 previously used in Simatic Virtualization as a Service (SiVaaS) have potential IT-Sec vulnerabilities. These are described in detail under the following CVEs in VMware Online Support;
We therefore strongly recommend updating the systems to the latest software version.
You will receive assistance on how to proceed and the necessary software updates (patches) as part of your service contract via our technical support .
As a short-term measure, we recommend that you isolate the management bus - as far as possible - or, if feasible, disconnect it completely from the host when not in use.
As an additional preventive measure, you should perform an unscheduled back-up of your complete system environment (virtual machines and hypervisor system configuration).
https://www.vmware.com/security/advisories/VMSA-2019-0022.html
https://www.vmware.com/security/advisories/VMSA-2020-0023.html