ICSA-20-343-05

icsaUScisa_csaf_ot

Siemens Embedded TCP/IP Stack Vulnerabilities-AMNESIA:33 (Update C)

view advisory published 2020-12-08

Security researchers discovered and disclosed 33 vulnerabilities in several open-source TCP/IP stacks for embedded devices, also known as "AMNESIA:33" vulnerabilities. This advisory describes the impact of one of these vulnerabilities (CVE-2020-13988) to Siemens products. Siemens has released updates for the affected products and recommends to update to the latest versions. The impact of additional "AMNESIA:33" vulnerabilities is described in Siemens Security Advisory SSA-541018.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2020-13988UShigh7.5—
An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uip_process in…
02

references

External citations — patches, advisories, analysis.

03

remediations (14)

  • MitigationSENTRON 3VA COM100/800

    For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.

  • MitigationSENTRON 3VA DSP800

    For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.

  • MitigationSENTRON PAC2200 (without MID Approval)

    For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.

  • MitigationSENTRON PAC3200

    For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.

  • MitigationSENTRON PAC3200T

    For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.

  • MitigationSENTRON PAC4200

    For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.

  • MitigationSIRIUS 3RW5 communication module Modbus TCP

    For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.

  • FixedSENTRON 3VA COM100/800

    Update to V4.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109765343/
  • FixedSENTRON 3VA DSP800

    Update to V2.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109761031/
  • FixedSENTRON PAC2200 (without MID Approval)

    Update to V3.0.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109760897/
  • FixedSENTRON PAC3200

    Update to V2.4.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/31674577/
  • FixedSENTRON PAC3200T

    Update to V3.0.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109793060/
  • FixedSENTRON PAC4200

    Update to V2.0.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/35029840/
  • FixedSIRIUS 3RW5 communication module Modbus TCP

    Update to V1.1.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109759671/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan