SSA-539476: Siemens SIMATIC NET CP, SINEMA and SCALANCE Products Affected by Vulnerabilities in Third-Party Component strongSwan
Vulnerabilities in the third-party component strongSwan could allow an attacker to cause a denial of service (DoS) condition in affected devices by exploiting integer overflow bugs. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-41991US | high7.5 | — | ||
The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigge… | ||||
| CVE-2021-41990US | high7.5 | — | ||
The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated s… | ||||
references
External citations — patches, advisories, analysis.
- SSA-539476: Siemens SIMATIC NET CP, SINEMA and SCALANCE Products Affected by Vulnerabilities in Third-Party Component strongSwan - CSAF Versionself
- SSA-539476: Siemens SIMATIC NET CP, SINEMA and SCALANCE Products Affected by Vulnerabilities in Third-Party Component strongSwan - PDF Versionself
- SSA-539476: Siemens SIMATIC NET CP, SINEMA and SCALANCE Products Affected by Vulnerabilities in Third-Party Component strongSwan - TXT Versionself
remediations (71)
- MitigationSIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- FixedRUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedRUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedRUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedRUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M804PB (6GK5804-0AP00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M804PB (6GK5804-0AP00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M874-2 (6GK5874-2AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M874-2 (6GK5874-2AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M874-3 (6GK5874-3AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M874-3 (6GK5874-3AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE S615 (6GK5615-0AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE S615 (6GK5615-0AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - FixedSCALANCE SC622-2C (6GK5622-2GS00-2AC2)
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805907/ - FixedSCALANCE SC632-2C (6GK5632-2GS00-2AC2)
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805907/ - FixedSCALANCE SC636-2C (6GK5636-2GS00-2AC2)
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805907/ - FixedSCALANCE SC642-2C (6GK5642-2GS00-2AC2)
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805907/ - FixedSCALANCE SC646-2C (6GK5646-2GS00-2AC2)
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805907/ - FixedSIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218/ - FixedSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218/ - FixedSIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218/ - FixedSIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218/ - FixedSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218/ - FixedSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)
Update to V3.0.22 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808678/ - FixedSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/ - FixedSINEMA Remote Connect Server
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811169/ - FixedSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - FixedSIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218/ - FixedSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)
Update to V3.0.22 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808678/ - FixedSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218/ - FixedSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan