ICSA-21-040-04

icsaUScisa_csaf_ot

Siemens RUGGEDCOM ROX II

view advisory published 2021-02-09

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens’ operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2019-17007UShigh7.5—
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.
CVE-2019-17006UScritical9.8OT elevated—
In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a san…
CVE-2018-18508USmedium6.5—
In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.
CVE-2020-1763UShigh7.5—
An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan…
CVE-2019-11745UShigh8.8—
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused…
CVE-2018-12404USmedium5.9—
A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack…
02

references

External citations — patches, advisories, analysis.

03

remediations (96)

  • MitigationRUGGEDCOM ROX MX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX MX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX MX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX MX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX MX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX MX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1400

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1400

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1400

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1400

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1400

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1400

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1500

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1500

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1500

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1500

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1500

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1500

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1501

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1501

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1501

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1501

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1501

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1501

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1510

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1510

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1510

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1510

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1510

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1510

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1511

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1511

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1511

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1511

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1511

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1511

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1512

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1512

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1512

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1512

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1512

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1512

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • FixedRUGGEDCOM ROX MX5000

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX MX5000

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX MX5000

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX MX5000

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX MX5000

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX MX5000

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1400

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1400

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1400

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1400

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1400

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1400

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1500

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1500

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1500

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1500

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1500

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1500

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1501

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1501

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1501

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1501

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1501

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1501

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1510

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1510

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1510

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1510

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1510

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1510

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1511

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1511

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1511

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1511

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1511

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1511

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1512

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1512

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1512

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1512

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1512

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1512

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX5000

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX5000

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX5000

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX5000

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX5000

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX5000

    Update to V2.14.0 or later version

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan