SSA-200951

SSA-200951: Multiple Vulnerabilities in Third-Party Component libcurl of TIM Devices

view advisory published 2021-06-08

SIMATIC TIM 1531 IRC devices are vulnerable to multiple vulnerabilities in the third party component libcurl that could allow an attacker to extract sensitive information and pass a revoked certificate as valid. Siemens has released an update for SIMATIC TIM 1531 IRC and recommends to update to the latest versions.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-8286US	high7.5	4.63% (92nd)	—	2020-12-14
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
CVE-2020-8169US	high7.5	3.93% (90th)	—	2020-12-14
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).

references

External citations — patches, advisories, analysis.

remediations (4)

MitigationSIMATIC TIM 1531 IRC (incl. SIPLUS NET variants)
Restrict access to the device to the internal or VPN network and to trusted IP addresses only
MitigationSIMATIC TIM 1531 IRC (incl. SIPLUS NET variants)
Restrict access to the device to the internal or VPN network and to trusted IP addresses only
FixedSIMATIC TIM 1531 IRC (incl. SIPLUS NET variants)
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331/
FixedSIMATIC TIM 1531 IRC (incl. SIPLUS NET variants)
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331/

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan