SSA-789208: Multiple Vulnerabilities (INFRA:HALT) in Interniche IP-Stack based Low Voltage Devices
Security researchers discovered and disclosed 14 vulnerabilities in the Interniche IP stack, also known as "INFRA:HALT" vulnerabilities [0]. This advisory describes the impact to Siemens low voltage products, which are only affected by four out of the 14 vulnerabilities. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available. [0] https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-31401US | high7.5 | — | ||
An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn't sanitize the value of the IP total length field (header len… | ||||
| CVE-2020-35685US | critical9.1OT elevated | — | ||
An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As… | ||||
| CVE-2020-35684US | high7.5 | — | ||
An issue was discovered in HCC Nichestack 3.0. The code that parses TCP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the le… | ||||
| CVE-2020-35683US | high7.5 | — | ||
An issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the I… | ||||
references
External citations — patches, advisories, analysis.
- SSA-789208: Multiple Vulnerabilities (INFRA:HALT) in Interniche IP-Stack based Low Voltage Devices - CSAF Versionself
- SSA-789208: Multiple Vulnerabilities (INFRA:HALT) in Interniche IP-Stack based Low Voltage Devices - PDF Versionself
- SSA-789208: Multiple Vulnerabilities (INFRA:HALT) in Interniche IP-Stack based Low Voltage Devices - TXT Versionself
remediations (14)
- No fix plannedSENTRON 7KM PAC Switched Ethernet PROFINET Expansion Module
Currently no remediation is planned
- No fix plannedSENTRON 7KM PAC Switched Ethernet PROFINET Expansion Module
Currently no remediation is planned
- No fix plannedSENTRON 7KM PAC Switched Ethernet PROFINET Expansion Module
Currently no remediation is planned
- No fix plannedSENTRON 7KM PAC Switched Ethernet PROFINET Expansion Module
Currently no remediation is planned
- FixedSENTRON 3WA COM190
Update to V2.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109782123/ - FixedSENTRON 3WA COM190
Update to V2.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109782123/ - FixedSENTRON 3WA COM190
Update to V2.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109782123/ - FixedSENTRON 3WL COM35
Update to V1.2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109766651/ - FixedSENTRON 3WL COM35
Update to V1.2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109766651/ - FixedSENTRON 3WL COM35
Update to V1.2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109766651/ - FixedSENTRON 7KM PAC Switched Ethernet PROFINET Expansion Module
Update to V2.1.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109749555/ - FixedSENTRON 7KM PAC Switched Ethernet PROFINET Expansion Module
Update to V2.1.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109749555/ - FixedSENTRON 7KM PAC Switched Ethernet PROFINET Expansion Module
Update to V2.1.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109749555/ - FixedSENTRON 7KM PAC Switched Ethernet PROFINET Expansion Module
Update to V2.1.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109749555/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan