Siemens TCP/IP Stack Vulnerabilities-AMNESIA:33 in SENTRON PAC / 3VA Devices (Update C)
Security researchers discovered and disclosed 33 vulnerabilities in several open-source TCP/IP stacks for embedded devices, also known as "AMNESIA:33" vulnerabilities. This advisory describes the impact of two of these vulnerabilities (CVE-2020-13987, CVE-2020-17437) to Siemens products. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not available. The impact of another "AMNESIA:33" vulnerability (CVE-2020-13988) is described in Siemens Security Advisory SSA-541017.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-17437US | high8.2 | — | ||
An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, t… | ||||
| CVE-2020-13987US | high7.5 | — | ||
An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_… | ||||
references
External citations — patches, advisories, analysis.
- SSA-541018: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SENTRON PAC / 3VA Devices (Part 2) - CSAF Versionself
- SSA-541018: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SENTRON PAC / 3VA Devices (Part 2) - PDF Versionself
- SSA-541018: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SENTRON PAC / 3VA Devices (Part 2) - TXT Versionself
- ICS Advisory ICSA-21-068-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-068-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (24)
- MitigationSENTRON 3VA COM100/800
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON 3VA COM100/800
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON 3VA DSP800
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC2200 (with CLP Approval)
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC2200 (with MID Approval)
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC2200 (without MID Approval)
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC3200
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC3200
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC3200T
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC3220
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC4200
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC4200
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- No fix plannedSENTRON PAC2200 (with CLP Approval)
Currently no remediation is planned
- FixedSENTRON 3VA COM100/800
Update to V4.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109765343/ - FixedSENTRON 3VA COM100/800
Update to V4.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109765343/ - FixedSENTRON 3VA DSP800
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799046/ - FixedSENTRON PAC2200 (with MID Approval)
MID-certified devices do not support firmware updates; V3.2.2 is contained in devices that are labeled as "M22 MID"
- FixedSENTRON PAC2200 (without MID Approval)
Update to V3.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109760897/ - FixedSENTRON PAC3200
Update to V2.4.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/31674577/ - FixedSENTRON PAC3200
Update to V2.4.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/31674577/ - FixedSENTRON PAC3200T
Update to V3.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793060/ - FixedSENTRON PAC3220
Update to V3.2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780938/ - FixedSENTRON PAC4200
Update to V2.3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/35029840/ - FixedSENTRON PAC4200
Update to V2.3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/35029840/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan