Compiling and loading BATCH with the 'Compile and Download Objects' function.55. Of PCS 7 V7.1 SP1 to consider F-monitoring times of F modules and F field devices after Y. Link/DP-PA Link. V7.1 + SP3 + Upd2. Online access and test functions of the programming tools can be carried out in exactly the same manner as with a real controller. This allows the entire program test to be carried out on-site in the development office.SIMATIC Open PCS7 + SP3 simulates a controller for functional testing of user blocks and programs for S7-300 and S7-400 on the programming device/PC.
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA512# SSA-701708: Local Privilege Escalation in Industrial ProductsPublication Date: 2016-11-07Last Update: 2019-10-08Current Version: 1.9CVSS v3.0 Base Score: 6.4SUMMARYIn non-default configurations several industrial products are affectedby a vulnerability that could allow local Microsoft Windows operatingsystem users to escalate their privileges.Siemens provides updates for several products and a temporary fix forthe remaining affected products. Siemens is working on new versions forthe remaining affected products and will update this advisory when newinformation becomes available.AFFECTED PRODUCTS AND SOLUTIONIf the affected products are installed under their default path('C:Program Files*' or the localized equivalent) and the default filesystem access permissions for drive C: were not modified, the securityvulnerability is not exploitable.However, if the affected products are not installed under their defaultpath ('C:Program Files*' or the localized equivalent), the securityvulnerability is potentially exploitable.* Primary Setup Tool (PST) - Affected versions: All versions < V4.2 HF1 - Remediation: Update to V4.2 HF1 - Download: https://support.industry.siemens.com/cs/ww/en/view/19440762* SIMATIC IT Production Suite - Affected versions: All versions < V7.0 SP1 HFX 2 - Remediation: Update to V7.0 SP1 HFX 2 - Download: https://mes-simaticit.siemens.com/tss/html/hfc.html* SIMATIC NET PC-Software - Affected versions: All versions < V14 - Remediation: Upgrade to V14 - Download: https://support.industry.siemens.com/cs/ww/en/view/109741996* SIMATIC PCS 7 V7.1 and earlier versions - Affected versions: All versions - Remediation: Apply temporary fix - Download: https://support.industry.siemens.com/cs/ww/en/view/109740929* SIMATIC PCS 7 V8.0 - Affected versions: All versions - Remediation: Apply temporary fix - Download: https://support.industry.siemens.com/cs/ww/en/view/109740929* SIMATIC PCS 7 V8.1 - Affected versions: All versions - Remediation: Apply temporary fix and apply SIMATIC WinCC V7.3 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109740929, https://support.industry.siemens.com/cs/ww/en/view/109742642* SIMATIC PCS 7 V8.2 - Affected versions: All versions < V8.2 SP1 - Remediation: Update to V8.2 SP1 - Download: To obtain SIMATIC PCS 7 V8.2 SP1 contact your local support.* SIMATIC STEP 7 (TIA Portal) V13 - Affected versions: All versions < V13 SP2 - Remediation: Update to V13 SP2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745155* SIMATIC STEP 7 V5.X - Affected versions: All versions < V5.5 SP4 HF11 - Remediation: Update to V5.5 SP4 HF11 - Download: https://support.industry.siemens.com/cs/de/en/view/109737984* SIMATIC WinAC RTX (F) 2010 SP2 - Affected versions: All versions < SIMATIC WinAC RTX 2010 SP3 - Remediation: Update to SIMATIC WinAC RTX 2010 SP3 and apply BIOS and Microsoft Windows updates - Download: https://support.industry.siemens.com/cs/ww/en/view/109765109* SIMATIC WinCC (TIA Portal) Basic, Comfort, Advanced - Affected versions: All versions < V14 - Remediation: Upgrade to V14 - Download: https://support.industry.siemens.com/cs/ww/en/view/109739719* SIMATIC WinCC (TIA Portal) Professional V13 - Affected versions: All versions < V13 SP2 - Remediation: Update to V13 SP2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745155* SIMATIC WinCC (TIA Portal) Professional V14 - Affected versions: All versions < V14 SP1 - Remediation: Update to V14 SP1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109746074* SIMATIC WinCC Runtime Professional V13 - Affected versions: All versions < V13 SP2 - Remediation: Update to V13 SP2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109746075* SIMATIC WinCC Runtime Professional V14 - Affected versions: All versions < V14 SP1 - Remediation: Update to V14 SP1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109746276* SIMATIC WinCC V7.0 SP2 and earlier versions - Affected versions: All versions < V7.0 SP2 Upd 12 - Remediation: Update to V7.0 SP2 Upd 12 - Download: https://support.industry.siemens.com/cs/ww/en/view/109741519* SIMATIC WinCC V7.0 SP3 - Affected versions: All versions < V7.0 SP3 Upd 8 - Remediation: Update to V7.0 SP3 Upd 8 - Download: https://support.industry.siemens.com/cs/ww/en/view/109741127* SIMATIC WinCC V7.2 - Affected versions: All versions < V7.2 Upd 14 - Remediation: Update to V7.2 Upd 14 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745028* SIMATIC WinCC V7.3 - Affected versions: All versions < V7.3 Upd 11 - Remediation: Update to V7.3 Upd 11 - Download: https://support.industry.siemens.com/cs/ww/en/view/109742642* SIMATIC WinCC V7.4 - Affected versions: All versions < V7.4 SP1 - Remediation: Update to V7.4 SP1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109746038* SIMIT V9.0 - Affected versions: All versions < V9.0 SP1 - Remediation: Update to V9.0 SP1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109743963* SINEMA Remote Connect Client - Affected versions: All versions < V1.0 SP3 - Remediation: Update to V1.0 SP3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109754280* SINEMA Server - Affected versions: All versions < V13 SP2 - Remediation: Update to V13 SP2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109741833* SOFTNET Security Client V5.0 - Affected versions: All versions - Remediation: Apply temporary fix - Download: https://support.industry.siemens.com/cs/ww/en/view/109740929* Security Configuration Tool (SCT) - Affected versions: All versions < V4.3 HF1 - Remediation: Update to V4.3 HF1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109744041* TeleControl Server Basic - Affected versions: All versions < V3.0 SP2 - Remediation: Update to V3.0 SP2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109483119WORKAROUNDS AND MITIGATIONSSiemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:* Install the affected products under their default path ('C:ProgramFiles*' or the localized equivalent) and verify that file system accesspermissions for drive C: were not modified. * Additionally, attackers must have local operating system access to theaffected products. Siemens recommends applying Defense-in-Depth(Download:https://www.siemens.com/cert/operational-guidelines-industrial-security)and restricting file system access rights. GENERAL SECURITY RECOMMENDATIONSAs a general security measure, Siemens strongly recommends to protectnetwork access to devices with appropriate mechanisms. In order tooperate the devices in a protected IT environment, Siemens recommends toconfigure the environment according to Siemens' operational guidelinesfor Industrial Security (Download:https://www.siemens.com/cert/operational-guidelines-industrial-security),and to follow the recommendations in the product manuals.Additional information on Industrial Security by Siemens can be foundat: https://www.siemens.com/industrialsecurityPRODUCT DESCRIPTIONSIMATIC WinCC is a supervisory control and data acquisition (SCADA)system.SIMATIC STEP 7 (TIA Portal) is an engineering software to configure andprogram SIMATIC controllers.SIMATIC PCS 7 is a distributed control system (DCS) integrating SIMATICWinCC, SIMATIC Batch, SIMATIC Route Control, OpenPCS7 and othercomponents.SIMATIC WinCC Runtime Professional is a visualization runtime platformused for operator control and monitoring of machines and plants.SIMATIC WinCC (TIA Portal) is an engineering software to configure andprogram SIMATIC Panels, SIMATIC Industrial PCs, and Standard PCs runningWinCC Runtime Advanced or SCADA System WinCC Runtime Professionalvisualization software.SIMATIC NET PC-Software is required for communication betweencontrollers (PLCs) and PC based solutions (HMIs).SINEMA Remote Connect ensures management of secure connections (VPN)between headquarters, service technicians and the installed machines orplants.SINEMA Server is a network management software designed by Siemens foruse in Industrial Ethernet networks.SIMATIC WinAC RTX (F) 2010 is a SIMATIC software controller for PC-basedautomation solutions.SIMATIC IT Production Suite is a plant-centric IT solution building thelink between Business Systems (e.g. ERP) and Control Systems.TeleControl Server Basic allows remote monitoring and control of plants.The SOFTNET Security Client allows programming devices such as PCs andnotebook computers to access network nodes or automation systemsprotected by SCALANCE S.The simulation software SIMIT allows the simulation of plant setups inorder to anticipate faults in the early planning phase.The Security Configuration Tool (SCT) is an engineering software forsecurity devices such as SCALANCE-S or CP 443-1 Advanced.The Primary Setup Tool (PST) allows initial network configuration ofSIMATIC NET Industrial Ethernet products.VULNERABILITY CLASSIFICATIONThe vulnerability classification has been performed by using the CVSS scoringsystem in version 3.0 (CVSS v3.0) (https://www.first.org/cvss/). The CVSS environmental score is specific to the customer's environment and will impactthe overall CVSS score. The environmental score should therefore be individually defined by the customer to accomplish final scoring.* Vulnerability CVE-2016-7165 Unquoted service paths could allow local Microsoft Windows operating system users to escalate their privileges if the affected products are not installed under their default path ('C:Program Files*' or the localized equivalent). CVSS v3.0 Base Score: 6.4 CVSS v3.0 Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:CACKNOWLEDGMENTSSiemens thanks the following parties for their efforts: * WATERSURE and KIANDRA IT for coordinated disclosureADDITIONAL INFORMATIONFor further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT:https://www.siemens.com/cert/advisoriesHISTORY DATAV1.0 (2016-11-07): Publication DateV1.1 (2016-11-18): Added update information for WinCC V7.3V1.2 (2016-12-21): Added update information for SIMIT V9.0 SP1 and Security ConfigurationTool (SCT V4.3 HF1)V1.3 (2017-02-13): Added update information for SIMATIC IT Production Suite V7.0 SP1 HFX 2V1.4 (2017-03-01): Added update information for SIMATIC WinCC V7.2 and STEP 7 V5.XV1.5 (2017-05-08): Added update information for SIMATIC WinCC V7.4, SIMATIC WinCC RuntimeProfessional, SIMATIC WinCC (TIA Portal) Professional, and SIMATIC STEP7 (TIA Portal) V13V1.6 (2017-06-20): Added update information for Primary Setup Tool (PST)V1.7 (2018-01-18): New advisory format, added update information for SINEMA RC Client;Adjusted fix information for PCS 7 V8.1V1.8 (2018-06-12): Added update information for PCS 7 V8.2V1.9 (2019-10-08): Merged WinAC RTX 2010 SP2 and WinAC RTX F 2010 SP2 to SIMATIC WinAC RTX(F) 2010 and added update information for SIMATIC WinAC RTX (F) 2010TERMS OF USESiemens Security Advisories are subject to the terms and conditions containedin Siemens' underlying license terms or other applicable agreements previouslyagreed to with Siemens (hereinafter 'License Terms'). To the extent applicableto information, software or documentation made available in or through aSiemens Security Advisory, the Terms of Use of Siemens' Global Website(https://www.siemens.com/terms_of_use, hereinafter 'Terms of Use'), inparticular Sections 8-10 of the Terms of Use, shall apply additionally. In caseof conflicts, the License Terms shall prevail over the Terms of Use.-----BEGIN PGP SIGNATURE-----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53Ak-----END PGP SIGNATURE-----
![V7.1 V7.1](http://www.ad.siemens.com.cn/productportal/prods/pcs7_top_v2/pcs7_engineering/pcs7_os_engineering/OS_Compile_download/OS_Complile_FAQ/image/image001.png)
Hi, I have PCS7 from SIMATIC (SIEMENS). IT has the WINCC Explorer 7.0 in it. I am required to use a feature of 'load online changes'. This feature allows one computer to make the changes in the activated WINCC in other computers that are connected in the network. I have searched the SIMATIC's internet onine help but it only shows steps for WINCC 6.0.
WINCC 6.0 had this option in the left side components list. But my WINCC 7.0 does not have that option.
Does anybody know how to install this feature? OR is there some other method of performing load online changes in WINCC 7.0?