SSA-676336

csafDEsiemens_psirt

SSA-676336: OpenSSH Vulnerabilities in SCALANCE X-200 and X-300/X408 Switches

view advisory published 2021-09-14

The latest update of the SCALANCE X-200 and X-300/X408 switches families fixes multiple OpenSSH vulnerabilities. The most severe of these vulnerabilities could allow a denial of service condition. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2016-10708UShigh7.5Exploit
sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated…
CVE-2016-10011USmedium5.5—
authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key informa…
CVE-2016-6515UShigh7.5Exploit
The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a deni…
02

references

External citations — patches, advisories, analysis.

03

remediations (624)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan