Siemens SCALANCE SC-600 Family
Multiple vulnerabilities affecting various third-party components of the SCALANCE SC-600 family could allow an attacker to cause a denial of service condition, corrupt memory or potentially execute custom code. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-32206US | medium6.5 | — | ||
curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number o… | ||||
| CVE-2022-32205US | medium4.3 | — | ||
A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large amount of (big) cookie… | ||||
| CVE-2022-30065US | high7.8 | — | ||
A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function. | ||||
| CVE-2018-25032US | high7.5 | Exploit | ||
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. | ||||
references
External citations — patches, advisories, analysis.
- SSA-333517: Multiple Vulnerabilities in SCALANCE SC-600 Family before V3.0 - CSAF Versionself
- SSA-333517: Multiple Vulnerabilities in SCALANCE SC-600 Family before V3.0 - PDF Versionself
- SSA-333517: Multiple Vulnerabilities in SCALANCE SC-600 Family before V3.0 - TXT Versionself
- ICS Advisory ICSA-22-349-18 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-349-18 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (24)
- FixedSCALANCE SC622-2C (6GK5622-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC622-2C (6GK5622-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC622-2C (6GK5622-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC622-2C (6GK5622-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC626-2C (6GK5626-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC626-2C (6GK5626-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC626-2C (6GK5626-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC626-2C (6GK5626-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC632-2C (6GK5632-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC632-2C (6GK5632-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC632-2C (6GK5632-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC632-2C (6GK5632-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC636-2C (6GK5636-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC636-2C (6GK5636-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC636-2C (6GK5636-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC636-2C (6GK5636-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC642-2C (6GK5642-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC642-2C (6GK5642-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC642-2C (6GK5642-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC642-2C (6GK5642-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC646-2C (6GK5646-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC646-2C (6GK5646-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC646-2C (6GK5646-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/ - FixedSCALANCE SC646-2C (6GK5646-2GS00-2AC2)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814276/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan