Siemens Industrial Products OpenSSL Heartbleed Vulnerability (Update B)
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-0160US | high7.5OT critical | KEV | ||
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive inform… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-14-105-03B JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-105-03B - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (5)
- MitigationAPE 2.0 (when SSL/TLS component is used in customer implementation)
S7-1500 V1.5. The update for S7-1500 V1.5 can be obtained here: (http://support.automation.siemens.com/WW/view/en/67295862/133100)
http://support.automation.siemens.com/WW/view/en/67295862/133100 - MitigationCP1543-1 (when FTPS active)
S7-1500 V1.5. The update for S7-1500 V1.5 can be obtained here: (http://support.automation.siemens.com/WW/view/en/67295862/133100)
http://support.automation.siemens.com/WW/view/en/67295862/133100 - MitigationS7-1500 (when HTTPS active)
S7-1500 V1.5. The update for S7-1500 V1.5 can be obtained here: (http://support.automation.siemens.com/WW/view/en/67295862/133100)
http://support.automation.siemens.com/WW/view/en/67295862/133100 - MitigationWinCC OA only
S7-1500 V1.5. The update for S7-1500 V1.5 can be obtained here: (http://support.automation.siemens.com/WW/view/en/67295862/133100)
http://support.automation.siemens.com/WW/view/en/67295862/133100 - MitigationeLAN-8.2 eLAN (when RIP is used)
S7-1500 V1.5. The update for S7-1500 V1.5 can be obtained here: (http://support.automation.siemens.com/WW/view/en/67295862/133100)
http://support.automation.siemens.com/WW/view/en/67295862/133100
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan