Handling Of Sensitive Data; Regular Firmware Updates; Notifications About Security Vulnerabilities (Siemens Security Advisories) - Siemens SIMATIC ET 200eco PN M12-L System Manual

Industrial cybersecurity
4.7 Secure operation of the system
4.7.3

Handling of sensitive data

When storing your security-relevant data on your PC, independently ensure secure data
storage.
4.7.4

Regular firmware updates

NOTE
Outdated firmware versions might not be monitored for security vulnerabilities.
• Always keep your plant/products up to date to benefit from troubleshooting and to
minimize potential risks.
• Use email notifications to be automatically informed about firmware updates.
There are two ways of being automatically informed about firmware updates:
• Use "Enable notification" and "Add to mySupport favorites" functions, see section Security
update notification (Page 24) .
• Consult the firmware collection on SIOS. To do this, register in the download section on
mySiePortal (https://sieportal.siemens.com/en-ww/home).
Also read the basic cybersecurity information in the Cybersecurity notes section.
For more information, see also the Firmware update (Page 88) section.
4.7.5

Notifications about security vulnerabilities (Siemens Security Advisories)

A vulnerability is a security vulnerability in information security. It can pose a threat as it
provides intruders with the opportunity to access system resources and manipulate or steal
data.
Siemens ProductCERT
If Siemens identifies or fixes security gaps (Vulnerabilities) in the products, this will be
published in the Security Advisories.
You can find the documents for SIMATIC on the following Siemens AG Web page: Siemens
ProductCERT and Siemens CERT
(https://new.siemens.com/global/en/products/services/cert.
html?s=SIMATIC#SecurityPublications)
Enter "SIMATIC" in the search box "Search Security Advisories".
On this page, you will also find all the required information on how to deal with
vulnerabilities:
• Contact persons for matters related to vulnerabilities
• Options for automated notifications regarding vulnerabilities
• Notifications are also possible in CSAF format
• Option to subscribe to RSS feeds and newsletters
30
Distributed I/O system ET 200eco PN M12-L
System Manual, 11/2023, A5E48753295-AG