Siemens RUGGEDCOM, SCALANCE, SIMATIC, SINEMA (Update B)
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-5391US | high7.5 | Exploit | ||
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a… | ||||
| CVE-2018-5390US | high7.5 | — | ||
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of… | ||||
references
External citations — patches, advisories, analysis.
- SSA-377115: SegmentSmack in Linux IP-Stack based Industrial Devices - HTML Versionself
- ICS Advisory ICSA-20-105-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-105-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (41)
- FixedRUGGEDCOM RM1224
Update to V6.1
- FixedRUGGEDCOM RM1224
Update to V6.1
- FixedRUGGEDCOM ROX II
Update to V2.13.3
- FixedSCALANCE M-800 / S615
Update to V6.1
- FixedSCALANCE M-800 / S615
Update to V6.1
- FixedSCALANCE SC-600
Update to V2.0 or a later version
- FixedSCALANCE SC-600
Update to V2.0 or a later version
- FixedSCALANCE W1700 IEEE 802.11ac
Update to V2.0
- FixedSCALANCE W1700 IEEE 802.11ac
Update to V2.0
- FixedSCALANCE W700 IEEE 802.11a/b/g/n
Update to V6.4
- FixedSCALANCE W700 IEEE 802.11a/b/g/n
Update to V6.4
- FixedSIMATIC NET CP 1242-7
Update to V3.2
- FixedSIMATIC NET CP 1242-7
Update to V3.2
- FixedSIMATIC NET CP 1243-1 (incl.'SIPLUS variants)
Update to V3.2
- FixedSIMATIC NET CP 1243-1 (incl.'SIPLUS variants)
Update to V3.2
- FixedSIMATIC NET CP 1243-7 LTE EU
Update to V3.2
- FixedSIMATIC NET CP 1243-7 LTE EU
Update to V3.2
- FixedSIMATIC NET CP 1243-7 LTE US
Update to V3.2
- FixedSIMATIC NET CP 1243-7 LTE US
Update to V3.2
- FixedSIMATIC NET CP 1243-8 IRC
Update to V3.2
- FixedSIMATIC NET CP 1243-8 IRC
Update to V3.2
- FixedSIMATIC NET CP 1542SP-1
Update to V2.1
- FixedSIMATIC NET CP 1542SP-1
Update to V2.1
- FixedSIMATIC NET CP 1542SP-1 IRC (incl.'SIPLUS variants)
Update to V2.1
- FixedSIMATIC NET CP 1542SP-1 IRC (incl.'SIPLUS variants)
Update to V2.1
- FixedSIMATIC NET CP 1543-1 (incl.'SIPLUS variants)
Update to V2.2
- FixedSIMATIC NET CP 1543-1 (incl.'SIPLUS variants)
Update to V2.2
- FixedSIMATIC NET CP 1543SP-1 (incl.'SIPLUS variants)
Update to V2.1
- FixedSIMATIC NET CP 1543SP-1 (incl.'SIPLUS variants)
Update to V2.1
- FixedSIMATIC RF185C
Update to V1.3 or later version
- FixedSIMATIC RF185C
Update to V1.3 or later version
- FixedSIMATIC RF186C
Update to V1.3 or later version
- FixedSIMATIC RF186C
Update to V1.3 or later version
- FixedSIMATIC RF186CI
Update to V1.3 or later version
- FixedSIMATIC RF186CI
Update to V1.3 or later version
- FixedSIMATIC RF188C
Update to V1.3 or later version
- FixedSIMATIC RF188C
Update to V1.3 or later version
- FixedSIMATIC RF188CI
Update to V1.3 or later version
- FixedSIMATIC RF188CI
Update to V1.3 or later version
- FixedSINEMA Remote Connect Server
Update to V2.1 or later version
- FixedSINEMA Remote Connect Server
Update to V2.1 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan