Siemens Linux-based Products (Update J)
A vulnerability made public under the name SAD DNS affects Domain Name System resolvers due to a vulnerability in the Linux kernel when handling ICMP packets. The Siemens products which are affected are listed below. For more information please see https://www.saddns.net/. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-25705US | high7.4OT elevated | Exploit | ||
A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP… | ||||
references
External citations — patches, advisories, analysis.
- SSA-324955: SAD DNS Attack in Linux Based Products - CSAF Versionself
- SSA-324955: SAD DNS Attack in Linux Based Products - PDF Versionself
- SSA-324955: SAD DNS Attack in Linux Based Products - TXT Versionself
- ICS Advisory ICSA-21-131-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-131-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (64)
- MitigationRUGGEDCOM RM1224 family (6GK6108-4AM00)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSCALANCE M-800 family
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSCALANCE S615 (6GK5615-0AA00-2AA2)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSCALANCE SC-600 Family
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSCALANCE W1750D
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1543-1 (incl. SIPLUS variants)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC MV540 H (6GF3540-0GE10)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC MV540 S (6GF3540-0CD10)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC MV550 H (6GF3550-0GE10)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC MV550 S (6GF3550-0CD10)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC MV560 U (6GF3560-0LE10)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC MV560 X (6GF3560-0HE10)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSINEMA Remote Connect Server
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationTIM 1531 IRC (6GK7543-1MX00-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- FixedRUGGEDCOM RM1224 family (6GK6108-4AM00)
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794349/ - FixedSCALANCE M-800 family
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794349/ - FixedSCALANCE S615 (6GK5615-0AA00-2AA2)
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794349/ - FixedSCALANCE SC-600 Family
Update to V2.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793041/ - FixedSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/de/en/view/109802805/ - FixedSIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799604/ - FixedSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/us/en/view/109812218/ - FixedSIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799584/ - FixedSIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799584/ - FixedSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/us/en/view/109812218/ - FixedSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIMATIC CP 1543-1 (incl. SIPLUS variants)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773 - FixedSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/ - FixedSIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00)
Update to V1.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109803418/ - FixedSIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00)
Update to V1.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109803418/ - FixedSIMATIC MV540 H (6GF3540-0GE10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/de/en/view/109804366 - FixedSIMATIC MV540 S (6GF3540-0CD10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/de/en/view/109804366 - FixedSIMATIC MV550 H (6GF3550-0GE10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/de/en/view/109804366 - FixedSIMATIC MV550 S (6GF3550-0CD10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/de/en/view/109804366 - FixedSIMATIC MV560 U (6GF3560-0LE10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/de/en/view/109804366 - FixedSIMATIC MV560 X (6GF3560-0HE10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/de/en/view/109804366 - FixedSINEMA Remote Connect Server
Update to V3.0 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793790/ - FixedSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799604/ - FixedSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/us/en/view/109812218/ - FixedSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/us/en/view/109812218/ - FixedSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Update to V2.2 Update 1 or later version
https://support.industry.siemens.com/cs/de/en/view/109803672/ - FixedTIM 1531 IRC (6GK7543-1MX00-0XE0)
Update to V2.2 Update 1 or later version
https://support.industry.siemens.com/cs/de/en/view/109803672/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan