DCOM Hardening

Over the past few days, and especially today, there have been a number of requests for information regarding Microsoft’s DCOM hardening (Security Update Guide - Microsoft Security Response Center ).

It looks like each GE Digital product is going through the process of addressing this issue specifically and directly. For example, CIMPLICITY released a SIM for CIMPLICITY 11.1 (CIMPLICITY 11.1 SIM 3 ka48a000000bx6RAAQ | GE Customer Center) that deals with Microsoft’s DCOM hardening directly.

At this time, CIMPLICITY 11.1 is the only product and version with a known update to address this potential issue. If the pattern holds, it is likely each product needs to be individually evaluated and SIMS released to address the issue as required.

GE Official Statement on issue

Other Product Official Statements

Kepware - CS350729 - Unable to establish OPC DA communication after installing Microsoft DCOM Hardening patches (CVE-2021-26414) with PTC Kepware Products
Rockwell Automation