SSA-560465

csafDEsiemens_psirt

SSA-560465: DHCP Client Vulnerability in VxWorks-based Industrial Products

view advisory published 2021-07-13

Various industry products are affected by a DHCP client vulnerability in Wind River VxWorks, that could allow an attacker to cause a heap-based buffer overflow. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-29998UScritical9.8—
An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.
02

references

External citations — patches, advisories, analysis.

03

remediations (170)

  • No fix plannedRUGGEDCOM WIN5100 series subscriber unit

    Currently no fix is planned

  • No fix plannedRUGGEDCOM WIN5200 series subscriber unit

    Currently no fix is planned

  • No fix plannedSCALANCE X200-4P IRT

    Currently no fix is planned

  • No fix plannedSCALANCE X201-3P IRT

    Currently no fix is planned

  • No fix plannedSCALANCE X201-3P IRT PRO

    Currently no fix is planned

  • No fix plannedSCALANCE X202-2IRT

    Currently no fix is planned

  • No fix plannedSCALANCE X202-2P IRT

    Currently no fix is planned

  • No fix plannedSCALANCE X202-2P IRT PRO

    Currently no fix is planned

  • No fix plannedSCALANCE X204-2

    Currently no fix is planned

  • No fix plannedSCALANCE X204-2FM

    Currently no fix is planned

  • No fix plannedSCALANCE X204-2LD

    Currently no fix is planned

  • No fix plannedSCALANCE X204-2LD TS

    Currently no fix is planned

  • No fix plannedSCALANCE X204-2TS

    Currently no fix is planned

  • No fix plannedSCALANCE X204IRT

    Currently no fix is planned

  • No fix plannedSCALANCE X204IRT PRO

    Currently no fix is planned

  • No fix plannedSCALANCE X206-1

    Currently no fix is planned

  • No fix plannedSCALANCE X206-1LD

    Currently no fix is planned

  • No fix plannedSCALANCE X208

    Currently no fix is planned

  • No fix plannedSCALANCE X208PRO

    Currently no fix is planned

  • No fix plannedSCALANCE X212-2

    Currently no fix is planned

  • No fix plannedSCALANCE X212-2LD

    Currently no fix is planned

  • No fix plannedSCALANCE X216

    Currently no fix is planned

  • No fix plannedSCALANCE X224

    Currently no fix is planned

  • No fix plannedSCALANCE X302-7 EEC (230V)

    Currently no fix is planned

  • No fix plannedSCALANCE X302-7 EEC (230V, coated)

    Currently no fix is planned

  • No fix plannedSCALANCE X302-7 EEC (24V)

    Currently no fix is planned

  • No fix plannedSCALANCE X302-7 EEC (24V, coated)

    Currently no fix is planned

  • No fix plannedSCALANCE X302-7 EEC (2x 230V)

    Currently no fix is planned

  • No fix plannedSCALANCE X302-7 EEC (2x 230V, coated)

    Currently no fix is planned

  • No fix plannedSCALANCE X302-7 EEC (2x 24V)

    Currently no fix is planned

  • No fix plannedSCALANCE X302-7 EEC (2x 24V, coated)

    Currently no fix is planned

  • No fix plannedSCALANCE X304-2FE

    Currently no fix is planned

  • No fix plannedSCALANCE X306-1LD FE

    Currently no fix is planned

  • No fix plannedSCALANCE X307-2 EEC (230V)

    Currently no fix is planned

  • No fix plannedSCALANCE X307-2 EEC (230V, coated)

    Currently no fix is planned

  • No fix plannedSCALANCE X307-2 EEC (24V)

    Currently no fix is planned

  • No fix plannedSCALANCE X307-2 EEC (24V, coated)

    Currently no fix is planned

  • No fix plannedSCALANCE X307-2 EEC (2x 230V)

    Currently no fix is planned

  • No fix plannedSCALANCE X307-2 EEC (2x 230V, coated)

    Currently no fix is planned

  • No fix plannedSCALANCE X307-2 EEC (2x 24V)

    Currently no fix is planned

  • No fix plannedSCALANCE X307-2 EEC (2x 24V, coated)

    Currently no fix is planned

  • No fix plannedSCALANCE X307-3

    Currently no fix is planned

  • No fix plannedSCALANCE X307-3LD

    Currently no fix is planned

  • No fix plannedSCALANCE X308-2

    Currently no fix is planned

  • No fix plannedSCALANCE X308-2LD

    Currently no fix is planned

  • No fix plannedSCALANCE X308-2LH

    Currently no fix is planned

  • No fix plannedSCALANCE X308-2LH+

    Currently no fix is planned

  • No fix plannedSCALANCE X308-2M

    Currently no fix is planned

  • No fix plannedSCALANCE X308-2M PoE

    Currently no fix is planned

  • No fix plannedSCALANCE X308-2M TS

    Currently no fix is planned

  • No fix plannedSCALANCE X310

    Currently no fix is planned

  • No fix plannedSCALANCE X310FE

    Currently no fix is planned

  • No fix plannedSCALANCE X320-1 FE

    Currently no fix is planned

  • No fix plannedSCALANCE X320-1-2LD FE

    Currently no fix is planned

  • No fix plannedSCALANCE X408-2

    Currently no fix is planned

  • No fix plannedSCALANCE XF201-3P IRT

    Currently no fix is planned

  • No fix plannedSCALANCE XF202-2P IRT

    Currently no fix is planned

  • No fix plannedSCALANCE XF204

    Currently no fix is planned

  • No fix plannedSCALANCE XF204-2

    Currently no fix is planned

  • No fix plannedSCALANCE XF204-2BA IRT

    Currently no fix is planned

  • No fix plannedSCALANCE XF204IRT

    Currently no fix is planned

  • No fix plannedSCALANCE XF206-1

    Currently no fix is planned

  • No fix plannedSCALANCE XF208

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-12M (230V, ports on front)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-12M (230V, ports on rear)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-12M (24V, ports on front)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-12M (24V, ports on rear)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-12M TS (24V)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-4M EEC (24V, ports on front)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-4M EEC (24V, ports on rear)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-4M EEC (2x 24V, ports on front)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-4M EEC (2x 24V, ports on rear)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-4M PoE (230V, ports on front)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-4M PoE (230V, ports on rear)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-4M PoE (24V, ports on front)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-4M PoE (24V, ports on rear)

    Currently no fix is planned

  • No fix plannedSCALANCE XR324-4M PoE TS (24V, ports on front)

    Currently no fix is planned

  • No fix plannedSIMATIC RF180C

    Currently no fix is planned

  • No fix plannedSIMATIC RF182C

    Currently no fix is planned

  • No fix plannedSIMATIC RFID 181EIP

    Currently no fix is planned

  • No fix plannedSIPLUS NET SCALANCE X308-2

    Currently no fix is planned

  • WorkaroundRUGGEDCOM WIN5100 series subscriber unit

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundRUGGEDCOM WIN5200 series subscriber unit

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X200-4P IRT

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X201-3P IRT

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X201-3P IRT PRO

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X202-2IRT

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X202-2P IRT

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X202-2P IRT PRO

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X204-2

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X204-2FM

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X204-2LD

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X204-2LD TS

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X204-2TS

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X204IRT

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X204IRT PRO

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X206-1

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X206-1LD

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X208

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X208PRO

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X212-2

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X212-2LD

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X216

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X224

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X302-7 EEC (230V)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X302-7 EEC (230V, coated)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X302-7 EEC (24V)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X302-7 EEC (24V, coated)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X302-7 EEC (2x 230V)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X302-7 EEC (2x 230V, coated)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X302-7 EEC (2x 24V)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X302-7 EEC (2x 24V, coated)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X304-2FE

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X306-1LD FE

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X307-2 EEC (230V)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X307-2 EEC (230V, coated)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X307-2 EEC (24V)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X307-2 EEC (24V, coated)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X307-2 EEC (2x 230V)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X307-2 EEC (2x 230V, coated)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X307-2 EEC (2x 24V)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X307-2 EEC (2x 24V, coated)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X307-3

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X307-3LD

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X308-2

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X308-2LD

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X308-2LH

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X308-2LH+

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X308-2M

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X308-2M PoE

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X308-2M TS

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X310

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X310FE

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X320-1 FE

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X320-1-2LD FE

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE X408-2

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XF201-3P IRT

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XF202-2P IRT

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XF204

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XF204-2

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XF204-2BA IRT

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XF204IRT

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XF206-1

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XF208

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-12M (230V, ports on front)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-12M (230V, ports on rear)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-12M (24V, ports on front)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-12M (24V, ports on rear)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-12M TS (24V)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-4M EEC (24V, ports on front)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-4M EEC (24V, ports on rear)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-4M EEC (2x 24V, ports on front)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-4M EEC (2x 24V, ports on rear)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-4M PoE (230V, ports on front)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-4M PoE (230V, ports on rear)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-4M PoE (24V, ports on front)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-4M PoE (24V, ports on rear)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSCALANCE XR324-4M PoE TS (24V, ports on front)

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSIMATIC RF180C

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSIMATIC RF182C

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSIMATIC RFID 181EIP

    Avoid the use of the DHCP client if unnecessary to your environment.

  • WorkaroundSIPLUS NET SCALANCE X308-2

    Avoid the use of the DHCP client if unnecessary to your environment.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan