Siemens SCALANCE and SIMATIC libcurl (Update B)
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-6570US | high8.8OT elevated | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that requir… | ||||
| CVE-2019-3823US | high7.5 | — | ||
libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to `smtp_endofresp… | ||||
| CVE-2019-3822US | critical9.8 | — | ||
libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 header (`lib/vauth/ntlm.c:Curl_auth_cre… | ||||
| CVE-2018-16890US | high7.5 | Exploit | ||
libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 messages (`lib/vauth/ntlm.c:ntlm_decode_… | ||||
| CVE-2018-14618US | critical9.8 | — | ||
curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password… | ||||
references
External citations — patches, advisories, analysis.
- SSA-436177: Multiple Vulnerabilities in SINEMA Remote Connect - HTML Versionself
- ICS Advisory ICSA-21-068-10 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-068-10 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationSINEMA Remote Connect Client
Turn off NTLM authentication to mitigate CVE-2018-16890
- MitigationSINEMA Remote Connect Client
Turn off NTLM authentication to mitigate CVE-2019-3822
- MitigationSINEMA Remote Connect Client
Turn off SMTP to mitigate CVE-2019-3823
- FixedSINEMA Remote Connect Client
Update to V2.0 HF1
- FixedSINEMA Remote Connect Client
Update to V2.0 HF1
- FixedSINEMA Remote Connect Client
Update to V2.0 HF1
- FixedSINEMA Remote Connect Client
Update to V2.0 HF1
- FixedSINEMA Remote Connect Server
Update to V2.0
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan