ICSA-12-102-05

icsaUScisa_csaf_ot

Siemens Scalance S Multiple Security Vulnerabilities

view advisory published 2012-01-13

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2012-1800USmedium6.1—
Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.…
02

references

External citations — patches, advisories, analysis.

03

remediations (3)

  • MitigationSCALANCE S602

    Siemens has published a patch that resolves both of the identified vulnerabilities and strongly recommends installing the updates by using the following links: Siemens Security Advisory firmware update (http://support.automation.siemens.com/WW/view/en/59869684) information about industrial security by Siemens recommended security practices by US-CERT.

    http://support.automation.siemens.com/WW/view/en/59869684
  • MitigationSCALANCE S612

    Siemens has published a patch that resolves both of the identified vulnerabilities and strongly recommends installing the updates by using the following links: Siemens Security Advisory firmware update (http://support.automation.siemens.com/WW/view/en/59869684) information about industrial security by Siemens recommended security practices by US-CERT.

    http://support.automation.siemens.com/WW/view/en/59869684
  • MitigationScalance S613

    Siemens has published a patch that resolves both of the identified vulnerabilities and strongly recommends installing the updates by using the following links: Siemens Security Advisory firmware update (http://support.automation.siemens.com/WW/view/en/59869684) information about industrial security by Siemens recommended security practices by US-CERT.

    http://support.automation.siemens.com/WW/view/en/59869684
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan