According to current knowledge, these compatibility problems also affect SIMATIC products. For this reason, we recommend that you do not install these security updates.

https://support.industry.siemens.com/cs/ww/en/view/109754953

 This is quite absurd, the rest of the world says that it is imperative that the security holes is plugged, but Siemens says that you should not!?

I'm hoping that patches for siemens software that allows for these patches to work is being worked on with haste! How long do they think that the worlds automation users can hold off windows security patches? I'm certain that there are a lot of systems that are not installed off-grid and does in fact need the patches ASAP!

IBN-Service

According to current knowledge, these compatibility problems also affect SIMATIC products. For this reason, we recommend that you do not install these security updates.

https://support.industry.siemens.com/cs/ww/en/view/109754953

craziemac

 This is quite absurd, the rest of the world says that it is imperative that the security holes is plugged, but Siemens says that you should not!?

yes, it is really crazy...

Siemens push out one "new" TIA Version after the next to earn fresh Money,
but they do not take care of any customers issues.

And my opinion is, it has becomes worse in the last years.

Hey guys,

Please be a bit more objectif. This information says: With the update your software might not work anymore. Normaly Siemens only says what is working.

And having such a deep windows update (I think you read some articles about meltdown and spectre) that even windows is forced to 'pause' his update means that there can be affects on other software, too.

So please keep in mind as you make up your opinion:
- This is a heavy security issue

- Windows reacted with a very fast update

- very many software (google it ;) ) have problems with the update, with AMD microsoft even was forced to pause his update

https://support.microsoft.com/en-us/help/4073707/windows-os-security-update-block-for-some-amd-based-devices

So, SIEMENS provides this information proactive to not make you blindly walking into a production stop and I have spoken with a few guys, they are working heavily in analysing and hopefully fixing this, soon.

Just for your general information: As soon as we are facing security issues we will make them public: https://www.siemens.com/cert/en/cert-security-advisories.htm

The notes there will be updated according to the knowledge about the issues.

Nevertheless: It is really a harsh thing to have such a big hardware bug in all of the intel and amd processors; and yes it is really concerning that these bugs then of course influence all of the systems who are working with them.

Best greetings,

Fafner

P.S. I think I can't hide this: Yes, I am a Siemens fanboy ;)

 I'm not saying that Siemens is to blame, I did think that the lack of information on what they where doing about it and how they prioritized it was not exactly uplifting. Your link did however enlighten me very much, the bulletin was much richer in information. Tnx

Fafner

Just for your general information: As soon as we are facing security issues we will make them public: https://www.siemens.com/cert/en/cert-security-advisories.htm

The notes there will be updated according to the knowledge about the issues.

 As for the fanboy part...I think I'll pretend I didn't see that 

Fafner

...

P.S. I think I can't hide this: Yes, I am a Siemens fanboy ;)

Hi "fanboy",

it is a little hard for me to understand what you like to say us.

If you are a Siemens "fanboy" (whatever a "fanboy" is, same thing like a "toyboy" :-) ?) why you do not have a look at the daily SIMATIC Newsletter? You will find nearly every month a long list of Windows - Updates that are not allowed to install, specially in connection with WinCC - installations.

Also, the last update for Windows 10 (1709) that is available from MS for many month is NOT ALLOWED with Simatic - installation.

That is all microsofts fault, so you like to tell us?

Siemens is very lazy with keeping "up to date" with Windows-OS.
They like more to add "funny features" than to solve old well known problems.

I do not know this problems with other software.

And also now, with this "critical" bug (that is there since 25 years...), Siemens remains in the same old "not my business" mentality.

To praise Siemens even more is probably more than inappropriate.

Just my 2 Cents.

IBN-Service

 (whatever a "fanboy" is, same thing like a "toyboy" :-)

Also, the last update for Windows 10 (1709) that is available from MS for many month is NOT ALLOWED with Simatic - installation.

That is all microsofts fault, so you like to tell us?

Hey IBN service,

Nice punch with that 'toyboy', and I not even have a good counter against that except for my bank account data. ;)

My statement was only regarding that lates patch for Meltdown/Spectre which. The issue is there for 25 years, but officially known only for a short period of time; I think half a year at the directly affected companies?

Here I wanted to point out that the restriction of that update makes much sense and I think it is a good idea to say pro-active that after the installation you can run into problems.

That you have the opinion that in general the updates get approved lately is also from my point of view understandable.
Note on that: better to have a update, tested for compatibilities, then to have a fast approval and standing with a plant not running. And no: Not everything is Microsofts fault, but the climate change for sure is :x ;)

Best efforts to you, Best regards

Fafner

Fafner

 And no: Not everything is Microsofts fault, but the climate change for sure is :x ;)

...

There is no climate Change as my friend Donald explained to me.