ICSA-16-103-03C

icsaUScisa_csaf_ot

Siemens Industrial Products DROWN Vulnerability (Update C)

view advisory published 2016-01-14

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2016-0800USmedium5.9Exploit
The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • MitigationROX I

    Siemens has released updates and encourages users to apply them as soon as possible. The following is a list of the products with their corresponding updates.

  • MitigationSCALANCE X200 IRT family

    Siemens has released updates and encourages users to apply them as soon as possible. The following is a list of the products with their corresponding updates.

  • MitigationSCALANCE X200 RNA family

    Siemens has released updates and encourages users to apply them as soon as possible. The following is a list of the products with their corresponding updates.

  • MitigationSCALANCE X200 family

    Siemens has released updates and encourages users to apply them as soon as possible. The following is a list of the products with their corresponding updates.

  • MitigationSCALANCE X300 family

    Siemens has released updates and encourages users to apply them as soon as possible. The following is a list of the products with their corresponding updates.

  • MitigationSCALANCE X414

    Siemens has released updates and encourages users to apply them as soon as possible. The following is a list of the products with their corresponding updates.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan