Siemens SCALANCE XM-400 and XR-500
SCALANCE XM-400 and XR-500 devices contain a vulnerability in the OSPF protocol implementation that could allow an unauthenticated remote attacker to cause interruptions in the network. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-37182US | high7.5 | — | ||
A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANCE… | ||||
references
External citations — patches, advisories, analysis.
- SSA-145224: Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices - CSAF Versionself
- SSA-145224: Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices - PDF Versionself
- SSA-145224: Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices - TXT Versionself
- ICS Advisory ICSA-22-167-10 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-167-10 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (50)
- MitigationSCALANCE XM408-4C
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM408-4C (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM408-8C
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM408-8C (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM416-4C
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM416-4C (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 1x230V
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 1x230V (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 24V
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 24V (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 2x230V
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 2x230V (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 1x230V
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 1x230V (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 24V
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 24V (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 2x230V
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 2x230V (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR528-6M
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR528-6M (2HR2)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR528-6M (2HR2, L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR528-6M (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR552-12M
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR552-12M (2HR2)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR552-12M (2HR2, L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- FixedSCALANCE XM408-4C
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XM408-4C (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XM408-8C
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XM408-8C (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XM416-4C
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XM416-4C (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR524-8C, 1x230V
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR524-8C, 1x230V (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR524-8C, 24V
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR524-8C, 24V (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR524-8C, 2x230V
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR524-8C, 2x230V (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR526-8C, 1x230V
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR526-8C, 1x230V (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR526-8C, 24V
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR526-8C, 24V (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR526-8C, 2x230V
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR526-8C, 2x230V (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR528-6M
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR528-6M (2HR2)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR528-6M (2HR2, L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR528-6M (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR552-12M
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR552-12M (2HR2)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - FixedSCALANCE XR552-12M (2HR2, L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan