ICSA-19-192-04 Siemens SIMATIC RF6XXR
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-6329US | medium5.9OT elevated | — | ||
OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonst… | ||||
| CVE-2013-0169US | low2.6 | Exploit | ||
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a… | ||||
| CVE-2011-3389US | medium4.3OT high | Exploit | ||
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data b… | ||||
references
External citations — patches, advisories, analysis.
remediations (12)
- MitigationSIMATIC RF615R
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to the device to the extent possible
- MitigationSIMATIC RF615R
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to the device to the extent possible
- MitigationSIMATIC RF615R
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to the device to the extent possible
- MitigationSIMATIC RF68XR
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to the device to the extent possible
- MitigationSIMATIC RF68XR
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to the device to the extent possible
- MitigationSIMATIC RF68XR
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to the device to the extent possible
- FixedSIMATIC RF615R
Update to V3.2.1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768501
https://support.industry.siemens.com/cs/ww/en/view/109768501 - FixedSIMATIC RF615R
Update to V3.2.1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768501
https://support.industry.siemens.com/cs/ww/en/view/109768501 - FixedSIMATIC RF615R
Update to V3.2.1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768501
https://support.industry.siemens.com/cs/ww/en/view/109768501 - FixedSIMATIC RF68XR
Update to V3.2.1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768501
https://support.industry.siemens.com/cs/ww/en/view/109768501 - FixedSIMATIC RF68XR
Update to V3.2.1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768501
https://support.industry.siemens.com/cs/ww/en/view/109768501 - FixedSIMATIC RF68XR
Update to V3.2.1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109768501
https://support.industry.siemens.com/cs/ww/en/view/109768501
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan