Siemens Industrial Products LLDP (Update D)
There are multiple vulnerabilities in an underlying Link Layer Discovery Protocol (LLDP) third party library. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-27827US | high7.5 | — | ||
A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially… | ||||
| CVE-2015-8011US | critical9.8 | — | ||
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execut… | ||||
references
External citations — patches, advisories, analysis.
- SSA-941426: Multiple LLDP Vulnerabilities in Industrial Products - CSAF Versionself
- SSA-941426: Multiple LLDP Vulnerabilities in Industrial Products - PDF Versionself
- SSA-941426: Multiple LLDP Vulnerabilities in Industrial Products - TXT Versionself
- ICS Advisory ICSA-21-194-07 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-194-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (68)
- MitigationSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC HMI Unified Comfort Panels
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC HMI Unified Comfort Panels
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSINUMERIK ONE MCP
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSINUMERIK ONE MCP
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationTIM 1531 IRC (6GK7543-1MX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationTIM 1531 IRC (6GK7543-1MX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- FixedSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - FixedSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - FixedSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - FixedSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - FixedSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773/ - FixedSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773/ - FixedSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/ - FixedSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/ - FixedSIMATIC HMI Unified Comfort Panels
Update to V17 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530 - FixedSIMATIC HMI Unified Comfort Panels
Update to V17 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530 - FixedSINUMERIK ONE MCP
Update to V2.0.1 or later version Please contact your Siemens representative for information on how to obtain the update.
- FixedSINUMERIK ONE MCP
Update to V2.0.1 or later version Please contact your Siemens representative for information on how to obtain the update.
- FixedSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773/ - FixedSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773/ - FixedSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - FixedSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - FixedSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - FixedSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - FixedSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331/ - FixedSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331/ - FixedTIM 1531 IRC (6GK7543-1MX00-0XE0)
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331/ - FixedTIM 1531 IRC (6GK7543-1MX00-0XE0)
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan