SSA-617233: Urgent/11 TCP/IP Stack Vulnerabilities in SIPROTEC 4 7SJ66 Devices
SIPROTEC 4 7SJ66 devices are affected by multiple security vulnerabilities due to the underlying Wind River VxWorks network stack. This stack is affected by nine of the eleven vulnerabilities that are also known as "URGENT/11". The vulnerabilities could allow an attacker to execute a variety of exploits for the purpose of denial of service (DoS), data extraction, remote code execution, etc. targeting availability, integrity and confidentiality of the devices and data. Siemens has released a new version for SIPROTEC 4 7SJ66 and recommends to update to the latest version.
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-12262US | critical9.8 | — | ||
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Lo… | ||||
| CVE-2019-12261US | critical9.8 | — | ||
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion dur… | ||||
| CVE-2019-12260US | critical9.8 | — | ||
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a ma… | ||||
| CVE-2019-12258US | high7.5 | Exploit | ||
Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options. | ||||
| CVE-2019-12255US | critical9.8 | Exploit | ||
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow. | ||||
| CVE-2019-12265US | medium5.3 | — | ||
Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3… | ||||
| CVE-2019-12263US | high8.1 | — | ||
Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race… | ||||
| CVE-2019-12259US | high7.5 | — | ||
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP pa… | ||||
| CVE-2019-12256US | critical9.8 | — | ||
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options. | ||||
references
External citations — patches, advisories, analysis.
- SSA-617233: Urgent/11 TCP/IP Stack Vulnerabilities in SIPROTEC 4 7SJ66 Devices - CSAF Versionself
- SSA-617233: Urgent/11 TCP/IP Stack Vulnerabilities in SIPROTEC 4 7SJ66 Devices - HTML Versionself
- SSA-617233: Urgent/11 TCP/IP Stack Vulnerabilities in SIPROTEC 4 7SJ66 Devices - PDF Versionself
- SSA-617233: Urgent/11 TCP/IP Stack Vulnerabilities in SIPROTEC 4 7SJ66 Devices - TXT Versionself
remediations (9)
- FixedSIPROTEC 4 7SJ66
Update to V4.41 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743555/ - FixedSIPROTEC 4 7SJ66
Update to V4.41 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743555/ - FixedSIPROTEC 4 7SJ66
Update to V4.41 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743555/ - FixedSIPROTEC 4 7SJ66
Update to V4.41 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743555/ - FixedSIPROTEC 4 7SJ66
Update to V4.41 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743555/ - FixedSIPROTEC 4 7SJ66
Update to V4.41 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743555/ - FixedSIPROTEC 4 7SJ66
Update to V4.41 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743555/ - FixedSIPROTEC 4 7SJ66
Update to V4.41 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743555/ - FixedSIPROTEC 4 7SJ66
Update to V4.41 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743555/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan