Siemens SIMATIC NET CP 443-1 OPC UA
All versions of the SIMATIC CP 443-1 OPC UA contain multiple vulnerabilities in the underlying third party component NTP. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
describes (15)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-9042US | medium5.9 | — | ||
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to… | ||||
| CVE-2015-7853US | critical9.8 | — | ||
The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (cr… | ||||
| CVE-2015-7705US | critical9.8 | — | ||
The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests. | ||||
| CVE-2017-6458US | high8.8 | — | ||
Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable. | ||||
| CVE-2016-2518US | medium5.3 | — | ||
The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode… | ||||
| CVE-2015-8138US | medium5.3OT elevated | — | ||
NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero. | ||||
| CVE-2016-7433US | medium5.3 | — | ||
NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance tha… | ||||
| CVE-2016-7431US | medium5.3 | — | ||
NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-20… | ||||
| CVE-2016-1550US | medium5.3 | — | ||
An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a… | ||||
| CVE-2016-1548US | high7.2 | — | ||
An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server. After making this switch, the c… | ||||
| CVE-2016-1547US | medium5.3 | — | ||
An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto… | ||||
| CVE-2016-4956US | medium5.3 | — | ||
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulner… | ||||
| CVE-2016-4955US | medium5.9 | — | ||
ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoof… | ||||
| CVE-2016-4954US | high7.5 | — | ||
The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed pa… | ||||
| CVE-2016-4953US | high7.5 | — | ||
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect aut… | ||||
references
External citations — patches, advisories, analysis.
- SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA - CSAF Versionself
- SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA - PDF Versionself
- SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA - TXT Versionself
- ICS Advisory ICSA-21-159-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-159-11 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (30)
- MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- No fix plannedSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
- No fix plannedSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
- No fix plannedSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
- No fix plannedSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
- No fix plannedSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
- No fix plannedSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
- No fix plannedSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
- No fix plannedSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
- No fix plannedSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
- No fix plannedSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
- No fix plannedSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
- No fix plannedSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
- No fix plannedSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
- No fix plannedSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
- No fix plannedSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan