Siemens SIMATIC RFID
A heap overflow vulnerability in dhclient of the affected products, which has been published alongside other vulnerabilities as part of NAME:WRECK could allow an attacker to potentially remotely execute code. Siemens recommends specific countermeasures for products.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-7461US | high7.3 | Exploit | ||
In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain… | ||||
references
External citations — patches, advisories, analysis.
- SSA-288459: Heap Overflow Vulnerability in RFID terminals - CSAF Versionself
- SSA-288459: Heap Overflow Vulnerability in RFID terminals - PDF Versionself
- SSA-288459: Heap Overflow Vulnerability in RFID terminals - TXT Versionself
- ICS Advisory ICSA-21-257-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-257-11 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationSIMATIC RF350M
Use trusted DNS servers in internal network, and restrict DNS traffic to this network only through firewalls.
- MitigationSIMATIC RF650M
Use trusted DNS servers in internal network, and restrict DNS traffic to this network only through firewalls.
- No fix availableSIMATIC RF350M
Currently no remediation is available
- No fix availableSIMATIC RF650M
Currently no remediation is available
- WorkaroundSIMATIC RF350M
Protect network access to affected devices.
- WorkaroundSIMATIC RF650M
Protect network access to affected devices.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan