ICSA-24-046-03

icsaUScisa_csaf_ot

Siemens SIMATIC RTLS Gateways

view advisory published 2024-02-13

SIMATIC RTLS Gateways are affected by vulnerabilities that were disclosed by JSOF research lab “Ripple20” for the TCP/IP stack. Siemens recommends countermeasures for products where fixes are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2020-11896UScritical10.0Exploit
The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.
02

references

External citations — patches, advisories, analysis.

03

remediations (10)

  • No fix plannedSIMATIC RTLS Gateway RTLS4030G, CMIIT (6GT2701-5DB23)

    Currently no fix is planned

  • No fix plannedSIMATIC RTLS Gateway RTLS4030G, ETSI (6GT2701-5DB03)

    Currently no fix is planned

  • No fix plannedSIMATIC RTLS Gateway RTLS4030G, FCC (6GT2701-5DB13)

    Currently no fix is planned

  • No fix plannedSIMATIC RTLS Gateway RTLS4030G, ISED (6GT2701-5DB33)

    Currently no fix is planned

  • No fix plannedSIMATIC RTLS Gateway RTLS4430G, Chirp, ETSI, FCC, ISED, IP65 (6GT2701-5CB03)

    Currently no fix is planned

  • WorkaroundSIMATIC RTLS Gateway RTLS4030G, CMIIT (6GT2701-5DB23)

    Implement Security recommendations according to the product manual

  • WorkaroundSIMATIC RTLS Gateway RTLS4030G, ETSI (6GT2701-5DB03)

    Implement Security recommendations according to the product manual

  • WorkaroundSIMATIC RTLS Gateway RTLS4030G, FCC (6GT2701-5DB13)

    Implement Security recommendations according to the product manual

  • WorkaroundSIMATIC RTLS Gateway RTLS4030G, ISED (6GT2701-5DB33)

    Implement Security recommendations according to the product manual

  • WorkaroundSIMATIC RTLS Gateway RTLS4430G, Chirp, ETSI, FCC, ISED, IP65 (6GT2701-5CB03)

    Implement Security recommendations according to the product manual

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan