Siemens SCALANCE X-300/X408 Switch Family DOS Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-8479US | medium6.8 | — | ||
The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote authenticated users to cause a denial… | ||||
| CVE-2014-8478US | high7.8 | — | ||
The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote attackers to cause a denial of service… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-15-020-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-15-020-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationSCALANCE X-300 switch family
Siemens provides firmware update V4.0, which fixes the vulnerabilities, and recommends updating as soon as possible. The firmware update is available at: http://support.automation.siemens.com/WW/view/en/107178573 Siemens also recommends protecting network access to all products except for perimeter devices with appropriate mechanisms. It is advised to follow recommended security practices and to configure the environment according to operational guidelines in order to run the devices in a protected IT environment. Siemens operational guidelines are available at: http://www.industry.siemens.com/topics/global/en/industrial-security/Documents/operational_guidelines_industrial_security_en.pdf For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-321046 at the following location: http://www.siemens.com/cert/advisories
- MitigationSCALANCE X-300 switch family
Siemens provides firmware update V4.0, which fixes the vulnerabilities, and recommends updating as soon as possible. The firmware update is available at: http://support.automation.siemens.com/WW/view/en/107178573 Siemens also recommends protecting network access to all products except for perimeter devices with appropriate mechanisms. It is advised to follow recommended security practices and to configure the environment according to operational guidelines in order to run the devices in a protected IT environment. Siemens operational guidelines are available at: http://www.industry.siemens.com/topics/global/en/industrial-security/Documents/operational_guidelines_industrial_security_en.pdf For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-321046 at the following location: http://www.siemens.com/cert/advisories
- MitigationSCALANCE X408
Siemens provides firmware update V4.0, which fixes the vulnerabilities, and recommends updating as soon as possible. The firmware update is available at: http://support.automation.siemens.com/WW/view/en/107178573 Siemens also recommends protecting network access to all products except for perimeter devices with appropriate mechanisms. It is advised to follow recommended security practices and to configure the environment according to operational guidelines in order to run the devices in a protected IT environment. Siemens operational guidelines are available at: http://www.industry.siemens.com/topics/global/en/industrial-security/Documents/operational_guidelines_industrial_security_en.pdf For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-321046 at the following location: http://www.siemens.com/cert/advisories
- MitigationSCALANCE X408
Siemens provides firmware update V4.0, which fixes the vulnerabilities, and recommends updating as soon as possible. The firmware update is available at: http://support.automation.siemens.com/WW/view/en/107178573 Siemens also recommends protecting network access to all products except for perimeter devices with appropriate mechanisms. It is advised to follow recommended security practices and to configure the environment according to operational guidelines in order to run the devices in a protected IT environment. Siemens operational guidelines are available at: http://www.industry.siemens.com/topics/global/en/industrial-security/Documents/operational_guidelines_industrial_security_en.pdf For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-321046 at the following location: http://www.siemens.com/cert/advisories
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan