SSA-662649: Denial of Service Vulnerability in Desigo DXR and PXC Controllers
A vulnerability in Desigo DXR and PXC controllers has been identified that could allow an attacker to disable and reset a device to factory state using a denial of service attack. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-41545US | high7.5 | — | ||
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- FixedDesigo DXR2
Update to V01.21.142.5-22 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC3
Update to V01.21.142.4-18 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC4
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC5
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan