SSA-685781: Multiple Vulnerabilities in Apache HTTP Server Affecting Siemens Products
Multiple vulnerabilities were identified in the Apache HTTP Server software. These include NULL Pointer Dereferencing, Out-of-bounds Write and Server-Side Request Forgery related vulnerabilities. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-40438US | critical9.0OT critical | KEV | ||
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. | ||||
| CVE-2021-39275US | critical9.8 | — | ||
ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules m… | ||||
| CVE-2021-34798US | high7.5 | — | ||
Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier. | ||||
references
External citations — patches, advisories, analysis.
- SSA-685781: Multiple Vulnerabilities in Apache HTTP Server Affecting Siemens Products - CSAF Versionself
- SSA-685781: Multiple Vulnerabilities in Apache HTTP Server Affecting Siemens Products - PDF Versionself
- SSA-685781: Multiple Vulnerabilities in Apache HTTP Server Affecting Siemens Products - TXT Versionself
remediations (16)
- MitigationRUGGEDCOM NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEMA Remote Connect Server
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEMA Server V14
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEMA Server V14
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEMA Server V14
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- No fix plannedRUGGEDCOM NMS
Currently no fix is planned
- No fix plannedSINEMA Server V14
Currently no fix is planned
- No fix plannedSINEMA Server V14
Currently no fix is planned
- No fix plannedSINEMA Server V14
Currently no fix is planned
- FixedSINEC NMS
Update to V1.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813788/ - FixedSINEC NMS
Update to V1.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813788/ - FixedSINEC NMS
Update to V1.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813788/ - FixedSINEMA Remote Connect Server
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811169/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan