Siemens TIM 4R-IE Devices
TIM 4R-IE devices contain multiple vulnerabilities in the integrated NTP component as listed below. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-7871US | critical9.8 | Exploit | ||
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication. | ||||
| CVE-2015-7855US | medium6.5 | Exploit | ||
The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 pa… | ||||
| CVE-2015-7705US | critical9.8 | — | ||
The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests. | ||||
| CVE-2015-5219US | high7.5 | — | ||
The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denia… | ||||
| CVE-2015-8138US | medium5.3OT elevated | — | ||
NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero. | ||||
| CVE-2015-7979US | high7.5 | — | ||
NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid auth… | ||||
| CVE-2015-7977US | medium5.9 | — | ||
ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command. | ||||
| CVE-2015-7973US | medium6.5OT elevated | — | ||
NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network. | ||||
| CVE-2016-1550US | medium5.3 | — | ||
An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a… | ||||
| CVE-2016-1548US | high7.2 | — | ||
An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server. After making this switch, the c… | ||||
| CVE-2016-1547US | medium5.3 | — | ||
An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto… | ||||
| CVE-2016-4954US | high7.5 | — | ||
The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed pa… | ||||
| CVE-2016-4953US | high7.5 | — | ||
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect aut… | ||||
| CVE-2015-7974US | high7.7 | — | ||
NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct imperson… | ||||
references
External citations — patches, advisories, analysis.
- SSA-497656: Multiple NTP Vulnerabilities in TIM 4R-IE Devices - CSAF Versionself
- SSA-497656: Multiple NTP Vulnerabilities in TIM 4R-IE Devices - HTML Versionself
- ICS Advisory ICSA-21-103-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-103-11 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (112)
- No fix plannedSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Currently no fix is planned
- No fix plannedSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Currently no fix is planned
- No fix plannedTIM 4R-IE (6NH7800-4BA00)
Currently no fix is planned
- No fix plannedTIM 4R-IE (6NH7800-4BA00)
Currently no fix is planned
- No fix plannedTIM 4R-IE (6NH7800-4BA00)
Currently no fix is planned
- No fix plannedTIM 4R-IE (6NH7800-4BA00)
Currently no fix is planned
- No fix plannedTIM 4R-IE (6NH7800-4BA00)
Currently no fix is planned
- No fix plannedTIM 4R-IE (6NH7800-4BA00)
Currently no fix is planned
- No fix plannedTIM 4R-IE (6NH7800-4BA00)
Currently no fix is planned
- No fix plannedTIM 4R-IE (6NH7800-4BA00)
Currently no fix is planned
- No fix plannedTIM 4R-IE (6NH7800-4BA00)
Currently no fix is planned
- No fix plannedTIM 4R-IE (6NH7800-4BA00)
Currently no fix is planned
- No fix plannedTIM 4R-IE (6NH7800-4BA00)
Currently no fix is planned
- No fix plannedTIM 4R-IE (6NH7800-4BA00)
Currently no fix is planned
- No fix plannedTIM 4R-IE (6NH7800-4BA00)
Currently no fix is planned
- No fix plannedTIM 4R-IE (6NH7800-4BA00)
Currently no fix is planned
- No fix plannedTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Currently no fix is planned
- No fix plannedTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Currently no fix is planned
- No fix plannedTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Currently no fix is planned
- No fix plannedTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Currently no fix is planned
- No fix plannedTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Currently no fix is planned
- No fix plannedTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Currently no fix is planned
- No fix plannedTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Currently no fix is planned
- No fix plannedTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Currently no fix is planned
- No fix plannedTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Currently no fix is planned
- No fix plannedTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Currently no fix is planned
- No fix plannedTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Currently no fix is planned
- No fix plannedTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Currently no fix is planned
- No fix plannedTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Currently no fix is planned
- No fix plannedTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Currently no fix is planned
- WorkaroundSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundSIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE (6NH7800-4BA00)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE (6NH7800-4BA00)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE (6NH7800-4BA00)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE (6NH7800-4BA00)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE (6NH7800-4BA00)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE (6NH7800-4BA00)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE (6NH7800-4BA00)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE (6NH7800-4BA00)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE (6NH7800-4BA00)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE (6NH7800-4BA00)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE (6NH7800-4BA00)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE (6NH7800-4BA00)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE (6NH7800-4BA00)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE (6NH7800-4BA00)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
- WorkaroundTIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)
Configure an additional firewall to prevent communication to the port udp/123 of an affected device.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan