SSA-910883: DHCP Client Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives
Several models of SINAMICS PERFECT HARMONY GH180 Drives are affected by a DHCP client vulnerability (CVE-2021-29998) in the integrated SCALANCE X206-1 device. The vulnerability could allow an attacker to cause a heap-based buffer overflow on that device and use it to get access to the drive's internal network. The list of affected drive models can be found in the section "Additional Information" below. Recently manufactured drives are no longer affected. For older drives, Siemens provides detailed remediation advise via customer support.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-29998US | critical9.8 | — | ||
An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client. | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- MitigationSINAMICS PERFECT HARMONY GH180 Drives
Contact your Siemens customer support for detailed information how to remediate the issue in affected drives
- FixedSINAMICS PERFECT HARMONY GH180 Drives
Drives manufactured since 2022 are not affected
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan