Siemens OpenSSL Vulnerabilities in Industrial Products
OpenSSL has published a security advisory [0] about a vulnerability in OpenSSL versions 1.1.1 < 1.1.1k, that allows an unauthenticated attacker to cause a Denial-of-Service (DoS) if a maliciously crafted renegotiation message is sent. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available. [0] https://www.openssl.org/news/secadv/20210325.txt
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-3449US | medium5.9 | Exploit | ||
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms… | ||||
references
External citations — patches, advisories, analysis.
- SSA-772220: OpenSSL Vulnerabilities in Industrial Products - CSAF Versionself
- SSA-772220: OpenSSL Vulnerabilities in Industrial Products - HTML Versionself
- SSA-772220: OpenSSL Vulnerabilities in Industrial Products - PDF Versionself
- SSA-772220: OpenSSL Vulnerabilities in Industrial Products - TXT Versionself
- ICS Advisory ICSA-22-104-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-104-05 - Web Versionself
- Recommended Practicesexternal
remediations (113)
- MitigationRUGGEDCOM CROSSBOW Station Access Controller (SAC)
Update ROX II to V2.14.1 ( https://support.industry.siemens.com/cs/ww/en/view/109800780/) or later version
- MitigationRUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
use TLS v1.3 only
- MitigationRUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
use TLS v1.3 only
- MitigationSCALANCE M804PB (6GK5804-0AP00-2AA2)
use TLS v1.3 only
- MitigationSCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
use TLS v1.3 only
- MitigationSCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
use TLS v1.3 only
- MitigationSCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
use TLS v1.3 only
- MitigationSCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
use TLS v1.3 only
- MitigationSCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
use TLS v1.3 only
- MitigationSCALANCE M874-2 (6GK5874-2AA00-2AA2)
use TLS v1.3 only
- MitigationSCALANCE M874-3 (6GK5874-3AA00-2AA2)
use TLS v1.3 only
- MitigationSCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
use TLS v1.3 only
- MitigationSCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
use TLS v1.3 only
- MitigationSCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
use TLS v1.3 only
- MitigationSCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
use TLS v1.3 only
- MitigationSCALANCE S615 (6GK5615-0AA00-2AA2)
use TLS v1.3 only
- MitigationSIMATIC Logon V1.6
Restrict access to Remote Access service, if used, to mitigate this issue. This service is disabled by default.
- MitigationSIMATIC PDM
Restrict access to the command interface, if used, to mitigate this issue. This interface is disabled by default.
- No fix plannedSCALANCE S602
Currently no fix is planned
- No fix plannedSCALANCE S612
Currently no fix is planned
- No fix plannedSCALANCE S623
Currently no fix is planned
- No fix plannedSCALANCE S627-2M
Currently no fix is planned
- No fix plannedSCALANCE W-700 IEEE 802.11n family
Currently no fix is planned
- No fix plannedSINAMICS Connect 300
Currently no fix is planned
- FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)
Update to V5.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813558/ - FixedRUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedRUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805118/ - FixedSCALANCE M804PB (6GK5804-0AP00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - FixedSCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - FixedSCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - FixedSCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - FixedSCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - FixedSCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - FixedSCALANCE M874-2 (6GK5874-2AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - FixedSCALANCE M874-3 (6GK5874-3AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - FixedSCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - FixedSCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - FixedSCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - FixedSCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - FixedSCALANCE S615 (6GK5615-0AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - FixedSCALANCE SC622-2C (6GK5622-2GS00-2AC2)
Update to V2.1.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109797244 - FixedSCALANCE SC632-2C (6GK5632-2GS00-2AC2)
Update to V2.1.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109797244 - FixedSCALANCE SC636-2C (6GK5636-2GS00-2AC2)
Update to V2.1.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109797244 - FixedSCALANCE SC642-2C (6GK5642-2GS00-2AC2)
Update to V2.1.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109797244 - FixedSCALANCE SC646-2C (6GK5646-2GS00-2AC2)
Update to V2.1.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109797244 - FixedSCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808629/ - FixedSCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808629/ - FixedSCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808629/ - FixedSCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808629/ - FixedSCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808629/ - FixedSCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808629/ - FixedSCALANCE XB-200
Update to V4.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799569 - FixedSCALANCE XC-200
Update to V4.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799569 - FixedSCALANCE XF-200BA
Update to V4.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799569 - FixedSCALANCE XM-400
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109796319 - FixedSCALANCE XP-200
Update to V4.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799569 - FixedSCALANCE XR-300WG
Update to V4.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799569 - FixedSCALANCE XR-500 family
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109796317 - FixedSIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - FixedSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - FixedSIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - FixedSIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - FixedSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - FixedSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773 - FixedSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/ - FixedSIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00)
Update to V1.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109803418/ - FixedSIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00)
Update to V1.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109803418/ - FixedSIMATIC HMI Comfort Outdoor Panels (incl. SIPLUS variants)
Update to V17.0 Upd 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - FixedSIMATIC HMI Comfort Panels (incl. SIPLUS variants)
Update to V17.0 Upd 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - FixedSIMATIC HMI KTP Mobile Panels
Update to V17.0 Upd 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - FixedSIMATIC Logon V1.6
Update to V1.6 Upd5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794407/ - FixedSIMATIC MV540 H (6GF3540-0GE10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804366 - FixedSIMATIC MV540 S (6GF3540-0CD10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804366 - FixedSIMATIC MV550 H (6GF3550-0GE10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804366 - FixedSIMATIC MV550 S (6GF3550-0CD10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804366 - FixedSIMATIC MV560 U (6GF3560-0LE10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804366 - FixedSIMATIC MV560 X (6GF3560-0HE10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804366 - FixedSIMATIC PCS 7 TeleControl
Update to V9.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805072/ - FixedSIMATIC PCS neo
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801424/ - FixedSIMATIC PDM
Update to V9.2 SP 1 or later version
- FixedSIMATIC Process Historian OPC UA Server
Update SIMATIC PCS neo to V3.1 or later version To obtain SIMATIC PCS neo V3.1 contact your local support.
- FixedSIMATIC RF166C (6GT2002-0EE20)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808633 - FixedSIMATIC RF185C (6GT2002-0JE10)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808633 - FixedSIMATIC RF186C (6GT2002-0JE20)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808633 - FixedSIMATIC RF186CI (6GT2002-0JE50)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808633 - FixedSIMATIC RF188C (6GT2002-0JE40)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808633 - FixedSIMATIC RF188CI (6GT2002-0JE60)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808633 - FixedSIMATIC RF360R (6GT2801-5BA30)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808759 - FixedSIMATIC RF610R (6GT2811-6BC10)
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808361 - FixedSIMATIC RF615R (6GT2811-6CC10)
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808361 - FixedSIMATIC RF650R (6GT2811-6AB20)
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808361 - FixedSIMATIC RF680R (6GT2811-6AA10)
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808361 - FixedSIMATIC RF685R (6GT2811-6CA10)
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808361 - FixedSIMATIC S7-1200 CPU family (incl. SIPLUS variants)
Update to V4.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793280/ - FixedSIMATIC S7-1500 CPU 1518-4 PN/DP MFP family (incl. SIPLUS variant)
Update to V2.9.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/ - FixedSIMATIC WinCC Runtime Advanced
Update to V17 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800912 - FixedSIMATIC WinCC TeleControl
Update to V7.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814522/ - FixedSINEC NMS
Update to V1.0 SP2
- FixedSINEMA Server
Update to V14 SP3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801374/ - FixedSINUMERIK OPC UA Server
Update to V3.1 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801292 - FixedSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - FixedSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773 - FixedSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - FixedSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - FixedSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331 - FixedTIA Administrator
Update to V1.0 SP4 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/ - FixedTIM 1531 IRC (6GK7543-1MX00-0XE0)
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan